r7756 - in trunk/BOOK: . introduction/welcome postlfs/security

randy at linuxfromscratch.org randy at linuxfromscratch.org
Wed Feb 11 18:45:57 PST 2009


Author: randy
Date: 2009-02-11 19:45:57 -0700 (Wed, 11 Feb 2009)
New Revision: 7756

Modified:
   trunk/BOOK/general.ent
   trunk/BOOK/introduction/welcome/changelog.xml
   trunk/BOOK/postlfs/security/openssl.xml
Log:
Updated to OpenSSL-0.9.8j

Modified: trunk/BOOK/general.ent
===================================================================
--- trunk/BOOK/general.ent	2009-02-11 14:52:32 UTC (rev 7755)
+++ trunk/BOOK/general.ent	2009-02-12 02:45:57 UTC (rev 7756)
@@ -3,7 +3,7 @@
 $Date$
 -->
 
-<!ENTITY day          "11">                   <!-- Always 2 digits -->
+<!ENTITY day          "12">                   <!-- Always 2 digits -->
 <!ENTITY month        "02">                   <!-- Always 2 digits -->
 <!ENTITY year         "2009">
 <!ENTITY copyrightdate "2001-&year;">
@@ -59,7 +59,7 @@
 
 <!-- Chapter 4 -->
 
-<!ENTITY openssl-version              "0.9.8i">
+<!ENTITY openssl-version              "0.9.8j">
 <!ENTITY gnutls-version               "1.6.3">
 <!ENTITY cracklib-version             "2.8.13">
 <!ENTITY linux-pam-version            "0.99.10.0">

Modified: trunk/BOOK/introduction/welcome/changelog.xml
===================================================================
--- trunk/BOOK/introduction/welcome/changelog.xml	2009-02-11 14:52:32 UTC (rev 7755)
+++ trunk/BOOK/introduction/welcome/changelog.xml	2009-02-12 02:45:57 UTC (rev 7756)
@@ -42,6 +42,15 @@
 -->
 
     <listitem>
+      <para>February 12th, 2009</para>
+      <itemizedlist>
+        <listitem>
+          <para>[randy] - Updated to OpenSSL-0.9.8j.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>February 11th, 2009</para>
       <itemizedlist>
         <listitem>

Modified: trunk/BOOK/postlfs/security/openssl.xml
===================================================================
--- trunk/BOOK/postlfs/security/openssl.xml	2009-02-11 14:52:32 UTC (rev 7755)
+++ trunk/BOOK/postlfs/security/openssl.xml	2009-02-12 02:45:57 UTC (rev 7756)
@@ -6,10 +6,10 @@
 
   <!ENTITY openssl-download-http "http://www.openssl.org/source/openssl-&openssl-version;.tar.gz">
   <!ENTITY openssl-download-ftp  "ftp://ftp.openssl.org/source/openssl-&openssl-version;.tar.gz">
-  <!ENTITY openssl-md5sum        "561e00f18821c74b2b86c8c7786f9d8b">
-  <!ENTITY openssl-size          "3.3 MB">
-  <!ENTITY openssl-buildsize     "39 MB">
-  <!ENTITY openssl-time          "1.3 SBU (additional 0.4 SBU to run the test suite)">
+  <!ENTITY openssl-md5sum        "a5cb5f6c3d11affb387ecf7a997cac0c">
+  <!ENTITY openssl-size          "3.7 MB">
+  <!ENTITY openssl-buildsize     "45 MB">
+  <!ENTITY openssl-time          "1.2 SBU (additional 0.3 SBU to run the test suite)">
 ]>
 
 <sect1 id="openssl" xreflabel="OpenSSL-&openssl-version;">
@@ -67,9 +67,13 @@
 
     <bridgehead renderas="sect3">OpenSSL Dependencies</bridgehead>
 
+    <bridgehead renderas="sect4">Recommended
+    (if you run the test suite during the build)</bridgehead>
+    <para role="recommended"><xref linkend="bc"/></para>
+
     <bridgehead renderas="sect4">Optional</bridgehead>
-    <para role="optional"><xref linkend="bc"/> (recommended
-    if you run the test suite during the build)</para>
+    <para role="optional"><xref linkend="mitkrb"/> or
+    <xref linkend="heimdal"/></para>
 
     <para condition="html" role="usernotes">User Notes:
     <ulink url='&blfs-wiki;/OpenSSL'/></para>
@@ -83,22 +87,29 @@
     the following commands:</para>
 
 <screen><userinput>patch -Np1 -i ../openssl-&openssl-version;-fix_manpages-1.patch &&
-./config --openssldir=/etc/ssl --prefix=/usr shared &&
-make MANDIR=/usr/share/man</userinput></screen>
+./config --prefix=/usr         \
+         --openssldir=/etc/ssl \
+         shared                \
+         zlib-dynamic          &&
+make</userinput></screen>
 
-    <para>To test the results, issue: <command>make test</command>.  Note that the
+    <para>To test the results, issue: <command>make test</command>.</para>
+
+    <!-- <para>To test the results, issue: <command>make test</command>.  Note that the
     test results/output depend on the availability of /etc/ssl/openssl.cnf.  If
     running the tests for the first time run the following as the 
     <systemitem class="username">root</systemitem> user before running the
     tests:</para>
 
-<screen role="root"><userinput>install -vd /etc/ssl &&
-install -v ./apps/openssl.cnf /etc/ssl/</userinput></screen>
+<screen role="root"><userinput>install -v -m755 d /etc/ssl &&
+install -v ./apps/openssl.cnf /etc/ssl/</userinput></screen> -->
 
     <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
 
-<screen role="root"><userinput>make MANDIR=/usr/share/man install &&
-cp -v -r certs /etc/ssl &&
+<screen role="root"><userinput>make MANDIR=/usr/share/man install                &&
+
+cp -v -r certs /etc/ssl                           &&
+
 install -v -d -m755 /usr/share/doc/openssl-&openssl-version; &&
 cp -v -r doc/{HOWTO,README,*.{txt,html,gif}} \
     /usr/share/doc/openssl-&openssl-version;</userinput></screen>
@@ -108,32 +119,39 @@
   <sect2 role="commands">
     <title>Command Explanations</title>
 
+    <para><parameter>shared</parameter>: This parameter forces the creation of
+    shared libraries along with the static libraries.</para>
+
+    <para><parameter>zlib-dynamic</parameter>: This parameter adds
+    compression/decompression functionality using the
+    <filename class="libraryfile">libz</filename> library.</para>
+
     <para><option>no-rc5 no-idea</option>: When added to the
     <command>./config</command> command, this will eliminate the building
     of those encryption methods. Patent licenses may be needed for you to
     utilize either of those methods in your projects.</para>
 
-    <para><option>enable-tlsext</option>: When added to the
+    <para><command>make MANDIR=/usr/share/man install</command>: This command
+    installs <application>OpenSSL</application> with the man pages in
+    <filename class='directory'>/usr/share/man</filename> instead of
+    <filename class='directory'>/etc/ssl/man</filename>.</para>
+
+    <!-- <para><option>enable-tlsext</option>: When added to the
     <command>./config</command> command, this switch will enable TLS
     Extensions. Currently this is only RFC 3546 and 4507bis for Server Name
     Indication.  This allows the use of multiple SSL certificates with multiple
     virtual hosts in Apache, while using only one IP address and one port for
-    all virtual hosts.</para>
+    all virtual hosts.</para> -->
 
-    <para><option>zlib-dynamic</option>: When added to the
+    <!-- <para><option>zlib-dynamic</option>: When added to the
     <command>./config</command> command, this switch will enable 
-    use of <filename>libz.so</filename> for compression/decompression.
-    </para>
+    use of <filename>libz.so</filename> for compression/decompression.</para> -->
 
-    <para><command>make MANDIR=/usr/share/man; make MANDIR=/usr/share/man
-    install</command>: These commands install
-    <application>OpenSSL</application> with the man pages in
-    <filename class='directory'>/usr/share/man</filename> instead of
-    <filename class='directory'>/etc/ssl/man</filename>.</para>
+    <para><command>cp -v -r certs /etc/ssl</command>: This package no longer
+    ships CA certificates. This commands installs documentation and sample
+    certificates as examples should one want to create/install their own
+    certificates.</para>
 
-    <para><command>cp -v -r certs /etc/ssl</command>: The certificates must
-    be copied manually as the default installation skips this step.</para>
-
   </sect2>
 
   <sect2 role="configuration">




More information about the blfs-book mailing list