Comments on: How to install the latest version of OpenSSL on CentOS 7?

By: Jeff

Jeff — Fri, 22 Jan 2021 06:25:01 +0000

This was very helpful. There is a big security flaw in the version most of my servers have installed. These instructions are complete and worked the first time in my environment.

By: Mathew

Mathew — Tue, 29 Sep 2020 13:18:10 +0000

In reply to yadinf. I sudo make install and it works.

By: EE

EE — Thu, 28 May 2020 14:10:26 +0000

“./config –prefix=/usr –openssldir=/etc/ssl –libdir=lib no-shared zlib-dynamic” fails with the message Pod/Escaped.pm did not return a true value at /usr/share/perl5/Pod/Simple.pm line 8. Any ideas on a fix for this

By: Earl

Earl — Thu, 28 May 2020 13:14:42 +0000

The “./config –prefix=/usr –openssldir=/etc/ssl –libdir=lib no-shared zlib-dynamic” fails; what would cause this?

By: yadinf

yadinf — Mon, 16 Mar 2020 15:46:26 +0000

In reply to Leen.

Critical for make test to work, should be added to the original post. Unfortunately make install still fails:
Cannot create directory /usr/include/openssl: No such file or directory
make: *** [install_dev] Error 2

By: Linux Learner

Linux Learner — Mon, 09 Mar 2020 18:07:58 +0000

I am not totally getting this.

What did you do with the system’s default/old openssl installation (files in /usr/bin/openssl, /etc/pki, /usr/share/doc/openssl-1.0.2k, /usr/share/man/man1/)? and openssl-devel, openssl-lib? no potential conflicts?

where is the binary installed with the new version? did it overwrite the system default version?

Thanks!

By: Henry Scott

Henry Scott — Wed, 15 Jan 2020 04:09:44 +0000

Excellent instructions! Two things to note:

1. make test may fail if perl-core is not installed (yum install perl-core).
2. There is a known issue with test 171 (make test)
https://github.com/openssl/openssl/issues/9866
https://github.com/openssl/openssl/pull/9876

By: Eric Ridenour

Eric Ridenour — Mon, 02 Dec 2019 04:02:26 +0000

Very good instructions. Thanks.

By: James

James — Tue, 22 Oct 2019 19:31:35 +0000

In reply to James.

Okay, I used the directory I used for installing, /tmp/openssl-1.1.1, and it worked. I guess I should not have installed into the /tmp directory. Should I reinstall into another directory, or can I just leave it as it is, and go ahead and compile nginx? Or can I just move the openssl-1.1.1 directory, and compile from there? What is the best place to install it?

I only did the nginx ‘make’ command, I have not done ‘make install’ yet, awaiting your response.

Thank you!

By: James

James — Tue, 22 Oct 2019 06:41:43 +0000

I installed successfully following your directions. However, when compiling a new version of nginx, it can’t find openssl. I’ve tried everything I can think of in the .configure statement for nginx, “–with-openssl=” switch, including:
/etc/ssl
/usr/local/lib
/usr/local/lib64

I keep getting the error:
&& make install_sw LIBDIR=lib
/bin/sh: line 2: ./config: No such file or directory
make[1]: *** [/etc/ssl/.openssl/include/openssl/ssl.h] Error 127
(or whatever path I used)

What should I use there? Thanks for any help!