How to install and update OpenSSL on Debian 11.3
- 00:28 lsb_release -a
- 00:46 openssl version
- 01:04 wget https://www.openssl.org/source/openssl-1.1.1q.tar.gz
- 01:32 mv openssl-1.1.1q.tar.gz /usr/src/
- 01:45 cd /usr/src/
- 01:58 ls -la
- 02:09 tar xzf openssl-1.1.1q.tar.gz
- 02:23 cd openssl-1.1q.2o/
- 02:40 ./config
- 02:59 make
- 03:10 make test
- 03:40 make install
- 03:59 openssl version
- 04:20 mv /usr/bin/openssl /root/
- 04:34 ln -s /usr/local/ssl/bin/openssl
- 04:58 sudo openssl version
To Install And Update OpenSSL On Debian 11.3
Introduction:
OpenSSL is an open-source implementation of the SSL and TLS protocols that is easy to install and update OpenSSL on an Ubuntu machine, and this tutorial also deals the same.
Installation Procedure:
Step 1: Check the OS version by using the below command.
root@linuxhelp: ~# lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 11 (bullseye)
Release: 11
Codename: bullseye
Step 2: Before starting the installation of OpenSSL, get the current version of OpenSSL by using the below command.
root@linuxhelp: ~# openssl version
OpenSSL 1.1.1n 15 Mar 2022
Step 3: After that, download the latest version of OpenSSL by deploying the below command.
root@linuxhelp: ~# wget https://www.openssl.org/source/openssl-1.1.1q.tar.gz
--2022-09-02 02:11:34-- https://www.openssl.org/source/openssl-1.1.1q.tar.gz
Resolving www.openssl.org (www.openssl.org)... 104.115.65.36, 2600:140f:400:1b4::c1e, 2600:140f:400:1a6::c1e
Connecting to www.openssl.org (www.openssl.org)|104.115.65.36|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9864061 (9.4M) [application/x-gzip]
Saving to: ‘openssl-1.1.1q.tar.gz’
openssl-1.1.1q.tar.gz 100%[=======================================>] 9.41M 4.33MB/s in 2.2s
2022-09-02 02:11:38 (4.33 MB/s) - ‘openssl-1.1.1q.tar.gz’ saved [9864061/9864061]
Step 4: Next move it to /usr/src directory by using the below command
root@linuxhelp: ~# mv openssl-1.1.1q.tar.gz /usr/src/
root@linuxhelp: ~# cd /usr/src/
root@linuxhelp src: ~# ls -la
linux-headers-4.10.0-38 linux-headers-4.10.0-38-generic ndiswrapper-1.60 openssl-1.1.1-latest.tar.gz
Step 5: Once it is downloaded, extract the downloaded OpenSSL tar file by using the below command.
root@linuxhelp src: ~# tar xzf openssl-1.1.1q.tar.gz
root@linuxhelp src: ~# cd openssl-1.1q.2o/
Step 6: To manually compile OpenSSL and install/upgrade OpenSSL, make use of the below command.
root@linuxhelp openssl-1.1.1q #./config
Operating system: x86_64-whatever-linux2
Configuring for linux-x86_64
Configuring for linux-x86_64
no-ec_nistp_64_gcc_128 [default] OPENSSL_NO_EC_NISTP_64_GCC_128 (skip dir)
no-gmp [default] OPENSSL_NO_GMP (skip dir)
no-jpake [experimental] OPENSSL_NO_JPAKE (skip dir)
no-krb5 [krb5-flavor not specified] OPENSSL_NO_KRB5
no-libunbound [experimental] OPENSSL_NO_LIBUNBOUND (skip dir)
no-md2 [default] OPENSSL_NO_MD2 (skip dir)
no-rc5 [default] OPENSSL_NO_RC5 (skip dir)
no-rfc3779 [default] OPENSSL_NO_RFC3779 (skip dir)
no-sctp [default] OPENSSL_NO_SCTP (skip dir)
no-shared [default]
no-ssl-trace [default] OPENSSL_NO_SSL_TRACE (skip dir)
no-ssl2 [default] OPENSSL_NO_SSL2 (skip dir)
no-store [experimental] OPENSSL_NO_STORE (skip dir)
no-unit-test [default] OPENSSL_NO_UNIT_TEST (skip dir)
no-weak-ssl-ciphers [default] OPENSSL_NO_WEAK_SSL_CIPHERS (skip dir)
no-zlib [default]
no-zlib-dynamic [default]
.
.
make[1]: Entering directory ' /usr/src/openssl-1.0.2o/test'
md2test.c => dummytest.c
rc5test.c => dummytest.c
jpaketest.c => dummytest.c
make[1]: Leaving directory ' /usr/src/openssl-1.0.2o/test
Step 7: After it is done, prepare the installation of OpenSSL by running the make command.
root@linuxhelp openssl-1.1.1q # make
making all in crypto...
make[1]: Entering directory ' /usr/src/openssl-1.1q2o/crypto'
/usr/bin/perl ../util/mkbuildinf.pl " gcc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -m64 -DL_ENDIAN -O3 -Wall -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DRC4_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM" " linux-x86_64" > buildinf.h
.
.
make[2]: Leaving directory ' /usr/src/openssl-1.0.2o/test'
make[1]: Leaving directory ' /usr/src/openssl-1.0.2o/test'
making all in tools...
make[1]: Entering directory ' /usr/src/openssl-1.0.2o/tools'
make[1]: Nothing to be done for ' all' .
make[1]: Leaving directory ' /usr/src/openssl-1.0.2o/tools'
Step 8: After it, run the make test command as follows.
root@linuxhelp openssl-1.1.1q # make test
testing...
make[1]: Entering directory ' /usr/src/openssl-1.0.2o/test'
make[2]: Entering directory ' /usr/src/openssl-1.0.2o'
making all in apps...
make[3]: Entering directory ' /usr/src/openssl-1.0.2o/apps'
make[3]: Nothing to be done for ' all' .
make[3]: Leaving directory ' /usr/src/openssl-1.0.2o/apps'
make[2]: Leaving directory ' /usr/src/openssl-1.0.2o'
../util/shlib_wrap.sh ./destest
Doing cbcm
Step 9: Once the command is executed, run the make install command which triggers the installation process.
linuxhelp openssl-1.1.1q # make install
making all in crypto...
make[1]: Entering directory ' /usr/src/openssl-1.0.2o/crypto'
making all in crypto/objects...
make[2]: Entering directory ' /usr/src/openssl-1.0.2o/crypto/objects'
make[2]: Nothing to be done for ' all' .
make[2]: Leaving directory ' /usr/src/openssl-1.0.2o/crypto/objects'
making all in crypto/md4...
make[2]: Entering directory ' /usr/src/openssl-1.0.2o/crypto/md4'
make[2]: Nothing to be done for ' all' .
.
cp libcrypto.pc /usr/local/ssl/lib/pkgconfig
chmod 644 /usr/local/ssl/lib/pkgconfig/libcrypto.pc
cp libssl.pc /usr/local/ssl/lib/pkgconfig
chmod 644 /usr/local/ssl/lib/pkgconfig/libssl.pc
cp openssl.pc /usr/local/ssl/lib/pkgconfig
chmod 644 /usr/local/ssl/lib/pkgconfig/openssl. pc
Step 10: Let' s check the version now.
linuxhelp openssl-1.1.1q # openssl version
OpenSSL 1.1.1q 15 Mar 2022
Step 11: If the old version is still displayed or installed before, please make a copy of OpenSSL bin file.
root@linuxhelp openssl-1.1.1q # mv /usr/bin/openssl /root/
root@linuxhelp openssl-1.1.1q # ln -s /usr/local/ssl/bin/openssl
Step 12: Now verify the OpenSSL version.
linuxhelp openssl-1.1q.2o # sudo openssl version
OpenSSL 1.1.1q 5 jul 2022 (Library OpenSSL 1.1.1n 15 mar 2022)
Conclusion:
We have reached the end of this article. In this guide, we have walked you through the steps required to install and update openssl on Debian 11.3. Your feedback is much welcome.
Comments ( 0 )
No comments available