Beyond Linux® From Scratch - Version 8.3

Chapter 4. Security

OpenSSL-1.0.2p

Introduction to OpenSSL-1.0.2p Libraries

The OpenSSL-1.0.2p package contains libraries relating to cryptography. These are useful for providing cryptographic functions to other packages, such as email applications and web browsers (for accessing HTTPS sites). This package provides only the libraries and headers for packages that have not yet been ported to openssl-1.1.x or later.

This package is known to build and work properly using an LFS-8.3 platform.

Package Information

Additional Downloads

OpenSSL-1.0.2p Dependencies

Optional

MIT Kerberos V5-1.16.1

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/OpenSSL

Installation of OpenSSL-1.0.2p Libraries

[Note]

Note

This package does not support parallel build.

Install OpenSSL-1.0.2p Libraries with the following commands: 

 patch -Np1 -i ../openssl-1.0.2p-compat_versioned_symbols-1.patch &&

./config --prefix=/usr            \
         --openssldir=/etc/ssl    \
         --libdir=lib/openssl-1.0 \
         shared                   \
         zlib-dynamic             &&

make depend                       &&
make -j1

To test the results, issue: make -j1 test. The test suite does not support parallel jobs.

Now, as the root user: 

make INSTALL_PREFIX=$PWD/Dest install_sw                      &&

rm -rf /usr/lib/openssl-1.0                                   &&
install -vdm755                   /usr/lib/openssl-1.0        &&
cp -Rv Dest/usr/lib/openssl-1.0/* /usr/lib/openssl-1.0        &&

mv -v  /usr/lib/openssl-1.0/lib{crypto,ssl}.so.1.0.0 /usr/lib &&
ln -sv ../libssl.so.1.0.0         /usr/lib/openssl-1.0        &&
ln -sv ../libcrypto.so.1.0.0      /usr/lib/openssl-1.0        &&

install -vdm755                   /usr/include/openssl-1.0    &&
cp -Rv Dest/usr/include/openssl   /usr/include/openssl-1.0    &&

sed 's@/include$@/include/openssl-1.0@' -i /usr/lib/openssl-1.0/pkgconfig/*.pc

Command Explanations

shared: This parameter forces the creation of shared libraries along with the static libraries.

zlib-dynamic: This parameter adds compression/decompression functionality using the libz library.

rm -rf /usr/lib/openssl-1.0: This will do nothing on a first install, but enables a later update. During the install the libraries are moved and replaced by symlinks. If you later upgrade to a future release of openssl-1.0.2 to fix newly discovered vulnerabilities, without this command the move would fail because the symlinks mean the source and destination files are identical.

Contents

Installed Libraries: libcrypto.so.1.0.0 and libssl.so.1.0.0
Installed Directories: /usr/lib/openssl-1.0 and /usr/include/openssl-1.0

Short Descriptions

libcrypto.so.1.0.0

implements a wide range of cryptographic algorithms used in various Internet standards. The services provided by this library are used by the OpenSSL implementations of SSL, TLS and S/MIME, and they have also been used to implement OpenSSH, OpenPGP, and other cryptographic standards.

libssl.so.1.0.0

implements the Transport Layer Security (TLS v1) protocol. It provides a rich API, documentation on which can be found by running man 3 ssl.

Last updated on 2018-08-16 22:28:07 -0700