centos7升级openssl

查看系统版本

[root@application-01 ~]# cat /etc/redhat-release 
CentOS Linux release 7.7.1908 (Core)

查看当前openssl版本

[root@application-01 ~]# openssl version
OpenSSL 1.0.2k-fips  26 Jan 2017

更新openssl 1.1.x

下载openssl

[root@application-01 ~]# cd /opt/software/
[root@application-01 software]# wget https://www.openssl.org/source/openssl-1.1.1l.tar.gz

解压openssl

[root@application-01 software]# tar xf openssl-1.1.1l.tar.gz 
[root@application-01 software]# cd openssl-1.1.1l
[root@application-01 openssl-1.1.1l]#

安装openssl

• https://github.com/openssl/openssl/blob/master/INSTALL.md#installing-openssl

[root@application-01 openssl-1.1.1l]# ./config --prefix=/usr/local/openssl-1.1.1l
[root@application-01 openssl-1.1.1l]# make && make install

openssl版本测试

[root@application-01 ~]# ln -sv /usr/local/openssl-1.1.1l/ /usr/local/openssl
‘/usr/local/openssl’ -> ‘/usr/local/openssl-1.1.1l/’
[root@application-01 ~]# ln -sv /usr/local/lib64/libssl.so.1.1 /usr/lib64/libssl.so.1.1
‘/usr/lib64/libssl.so.1.1’ -> ‘/usr/local/lib64/libssl.so.1.1’
[root@application-01 ~]# ln -sv /usr/local/lib64/libcrypto.so.1.1 /usr/lib64/libcrypto.so.1.1
‘/usr/lib64/libcrypto.so.1.1’ -> ‘/usr/local/lib64/libcrypto.so.1.1’
[root@application-01 ~]# /usr/local/openssl/bin/openssl version
OpenSSL 1.1.1l  24 Aug 2021

设置全局变量

[root@application-01 ~]# cat /etc/profile.d/openssl.sh
export PATH=/usr/local/openssl/bin:$PATH
[root@application-01 ~]# source /etc/profile

开启新终端验证opnessl版本

[root@application-01 ~]# openssl version
OpenSSL 1.1.1l  24 Aug 2021

更新openssl 3.x

安装依赖

# yum install -y perl-CPAN

# perl -MCPAN -e shell

cpan[1]> install IPC/Cmd.pm
...
Running make install
Installing /usr/local/share/perl5/IPC/Cmd.pm
Installing /usr/local/share/man/man3/IPC::Cmd.3pm
Appending installation info to /usr/lib64/perl5/perllocal.pod
  BINGOS/IPC-Cmd-1.04.tar.gz
  /usr/bin/make install  -- OK

cpan[2]>

下载openssl 3.x

# git clone -b openssl-3.0.8 https://github.com/openssl/openssl.git

安装openssl 3.x

# cd openssl
# ./config
# make install

查看openss依赖的so文件

# ldd openssl

	linux-vdso.so.1 =>  (0x00007fff049ee000)
	libssl.so.3 => not found
	libcrypto.so.3 => not found
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f19efc15000)
	libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f19ef9f9000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f19ef62a000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f19efe21000)

添加so文件

# ln -sv /usr/local/lib64/libssl.so.3 /lib64/
# ln -sv /usr/local/lib64/libcrypto.so.3 /lib64/

查看openssl 版本信息

# openssl version
OpenSSL 3.0.8  (Library: OpenSSL 3.0.8 )