The openssl heartbleed bug has made the rounds today here i have given how to update it to latest one from source file.
Check you openssl version
#openssl version
OpenSSL 1.0.1 14 Mar 2012 -- it is very old version
Download openssl-1.0.1g.tar.gz from http://www.openssl.org/source/
Check gcc and glibc installed or not by,
#rpm -qa|grep gcc
#rpm -qa|grep glibc
if the both files are not installed then install it.
now extract openssl-1.0.1g.tar.gz
cd openssl-1.0.1g
./config
make
make install
cp /usr/bin/openssl /usr/bin/openssl.org
cp -r /usr/local/ssl/bin/openssl /usr/bin/openssl
cp -r /etc/pki/tls/openssl.cnf /etc/pki/tls/openssl.cnf.org
cp -r /usr/local/ssl/openssl.cnf /etc/pki/tls/openssl.cnf
#openssl version
OpenSSL 1.0.1g 7 Apr 2014
Now you have updated the openssl to latest one.
Check you openssl version
#openssl version
OpenSSL 1.0.1 14 Mar 2012 -- it is very old version
Download openssl-1.0.1g.tar.gz from http://www.openssl.org/source/
Check gcc and glibc installed or not by,
#rpm -qa|grep gcc
#rpm -qa|grep glibc
if the both files are not installed then install it.
now extract openssl-1.0.1g.tar.gz
cd openssl-1.0.1g
./config
make
make install
cp /usr/bin/openssl /usr/bin/openssl.org
cp -r /usr/local/ssl/bin/openssl /usr/bin/openssl
cp -r /etc/pki/tls/openssl.cnf /etc/pki/tls/openssl.cnf.org
cp -r /usr/local/ssl/openssl.cnf /etc/pki/tls/openssl.cnf
#openssl version
OpenSSL 1.0.1g 7 Apr 2014
Now you have updated the openssl to latest one.
No comments:
Post a Comment