centos7 查看与升级openssl

介绍

有些时间，我们可能需要使用到openssl新版本的功能，但是centos的源目前没有提供那么新的版本，就需要自己更新了。

我这里就是需要使用openssl生成sm2的公钥私钥，需要升级到1.1.1。

升级方法

[root@node-21-243 deploy]# openssl version
OpenSSL 1.0.2k-fips  26 Jan 2017
[root@node-21-243 deploy]# cd /usr/local/src
[root@node-21-243 src]# wget https://github.com/openssl/openssl/archive/OpenSSL_1_1_1c.tar.gz
[root@node-21-243 src]tar xzvf ./OpenSSL_1_1_1c.tar.gz
[root@node-21-243 src]# cd openssl-OpenSSL_1_1_1c/
[root@node-21-243 openssl-OpenSSL_1_1_1c]# ./config
Operating system: x86_64-whatever-linux2
Configuring OpenSSL version 1.1.1c (0x1010103fL) for linux-x86_64
Using os-specific seed configuration
Creating configdata.pm
Creating Makefile

**********************************************************************
***                                                                ***
***   OpenSSL has been successfully configured                     ***
***                                                                ***
***   If you encounter a problem while building, please open an    ***
***   issue on GitHub <https://github.com/openssl/openssl/issues>  ***
***   and include the output from the following command:           ***
***                                                                ***
***       perl configdata.pm --dump                                ***
***                                                                ***
***   (If you are new to OpenSSL, you might want to consult the    ***
***   'Troubleshooting' section in the INSTALL file first)         ***
***                                                                ***
**********************************************************************

[root@node-21-243 openssl-OpenSSL_1_1_1c]# make
[root@node-21-243 openssl-OpenSSL_1_1_1c]# make install
[root@node-21-243 openssl-OpenSSL_1_1_1c]# mv /usr/bin/openssl /usr/bin/oldopenssl
[root@node-21-243 openssl-OpenSSL_1_1_1c]# ln -s /usr/local/bin/openssl /usr/bin/openssl
[root@node-21-243 openssl-OpenSSL_1_1_1c]# ln -s /usr/local/lib64/libssl.so.1.1 /usr/lib64/
[root@node-21-243 openssl-OpenSSL_1_1_1c]# ln -s /usr/local/lib64/libcrypto.so.1.1 /usr/lib64/
[root@node-21-243 openssl-OpenSSL_1_1_1c]# openssl version
OpenSSL 1.1.1c  28 May 2019

注意

执行./config命令会检查相关依赖，根据返回的信息，安装相关依赖即可。如果不缺少依赖的话，会返回上面的输出。