Home / server / Questions / 823419
In Process
merlin
Asked: 2016-12-31 08:04:40 +0800 CST

How to ugrade to openssl 1.0.2 within ubuntu 14.04 LTS

  • 772

I need to upgrade Openssl to 1.0.2 to get a certain feature. This worked following this tutorial http://www.miguelvallejo.com/updating-to-openssl-1-0-2g-on-ubuntu-server-12-04-14-04-lts-to-stop-cve-2016-0800-drown-attack/ However, HAProxy for example is still built with the old openssl version and thus does not support the ssl feature I need

How do I upgrade without compiling? I tried apt-get update and upgrade and also dist-upgrade. All that did not bring me to version 1.0.2

ubuntu openssl

3 Answers

  1. As mentioned here, this openssl 1.0.2 is supported till 31st December, 2019

    1. Download source from https://www.openssl.org/source/openssl-1.0.2n.tar.gz
    2. Extract it to a folder

    3. Go to the extracted folder and use the following command

      sudo ./config && sudo make && sudo make install

    4. It will take some time to install

    5. Link the newly installed openssl

      sudo ln -sf /usr/local/ssl/bin/openssl `which openssl`

    6. Check the version and make sure that it is installed.

      openssl version -v
    • 5

  2. This article has a complete answer. https://www.miguelvallejo.com/tag/installing-openssl-1-0-2g-on-ubuntu/

    cURL Method

    sudo apt-get install php5-curl (Install cURL library)
    sudo apt-get install make (Install compiling library Make)
    curl https://www.openssl.org/source/openssl-1.0.2l.tar.gz | tar xz && cd openssl-1.0.2l && sudo ./config && sudo make && sudo make install (single command that will download latest binaries, extract them, cd into the directory, compile configuration and then install the files)
    sudo ln -sf /usr/local/ssl/bin/openssl ‘which openssl’ (This will create a sym link to the new binaries)
    openssl version -v (Used to check the version of the Current OpenSSL binaries)

    wget method

    sudo apt-get install make (Install compiling library Make)
    wget https://www.openssl.org/source/openssl-1.0.2l.tar.gz (Download the latest OpenSSL 1.0.2g binaries)
    tar -xzvf openssl-1.0.2l.tar.gz (Extract the tar ball to the local directory)
    cd openssl-1.0.2l (Enter extracted OpenSSL directory)
    sudo ./config (Configure binaries for compiling)
    sudo make install (install configured binaries)
    sudo ln -sf /usr/local/ssl/bin/openssl which openssl (This will create a sym link to the new binaries)
    openssl version -v (Used to check the version of the Current OpenSSL binaries)

    • 1

  3. You might need this to install "add-apt-repository":

    sudo apt-get update && apt-get install -y software-properties-common

    This will get you up to v1.0.2g without the need to compile:

    openssl version -a
    sudo add-apt-repository ppa:0k53d-karl-f830m/openssl
    sudo apt-get update
    sudo apt-get install openssl
    openssl version -a

    • 0