By
the time(2024) one our system use this old OpenSSL version 1.1.1g and
we are going to update it to latest version of 1.1.1 openSSL version.
1st we verify the current verions of openSSL.
openssl version.
Then we need to download openssl. By the time the latest version of openSSL does not appear in directly openSSL downloads. Therefore, we need to fetch it from archive.
Archive page:https://openssl-library.org/source/old/1.1.1/index.html
- Fetch the tarball:
wget https://github.com/openssl/openssl/releases/download/OpenSSL_1_1_1w/openssl-1.1.1w.tar.gz
- Unpack the tarball with
tar -zxf openssl-1.1.1g.tar.gz && cd openssl-1.1.1g
- Issue the command
./config
. - Issue the command
make
(You may need to runsudo apt install make gcc
before running this command successfully). - Run
make test
to check for possible errors. - Backup current openssl binary:
sudo mv /usr/bin/openssl ~/tmp
- Issue the command
sudo make install
. - Create symbolic link from newly install binary to the default location:
sudo ln -s /usr/local/bin/openssl /usr/bin/openssl
-
- Run the command
sudo ldconfig
to update symlinks and rebuild the library cache.
Assuming that there were no errors in executing steps 4 through 10, you should have successfully installed the new version of OpenSSL.
Again, from the terminal issue the command to verify the installation:
openssl version