149. ★漏洞：OpenSSL版本过低 修复方案 手动编译

 

[root@localhost openssl]# openssl version -v

 

[root@localhost openssl]# tar xf openssl-1.1.1c.tar.gz

 

[root@localhost openssl]# cd openssl-1.1.1c/

[root@localhost openssl-1.1.1c]# ./config --prefix=/usr/local/openssl --openssldir=/usr/local/openssl enable-ec_nistp_64_gcc_128

[root@localhost openssl-1.1.1c]# source /etc/profile

[root@localhost openssl-1.1.1c]# make && make install

时间有点久,3~10分钟。

[root@localhost openssl-1.1.1c]# mv /usr/bin/openssl /usr/bin/openssl.bak //备份原openssl配置

[root@localhost include]# ln -s /usr/local/openssl/include/openssl /usr/include/openssl

[root@localhost include]# ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl

[root@localhost include]# echo "/usr/local/openssl/lib/" >> /etc/ld.so.conf

[root@localhost include]# ldconfig

[root@localhost include]# ldd $(which openssl) 

 

 

[root@sdw1 openssl-1.1.1c]# openssl version -v