Otu esi etinye OpenSSL site na Isi mmalite na CentOS na Ubuntu


OpenSSL bụ ọba akwụkwọ sọftụwia arụpụtara n'uju nke nwere mmejuputa isi mmalite nke usoro nchekwa nchekwa Transport Layer (TLS) na Secure Sockets Layer (SSL), ejiri maka ichekwa ozi ebufe n'elu netwọkụ kọmputa.

Ọ bụ ọbá akwụkwọ cryptography ebumnuche izugbe ma na-akwado ọtụtụ algorithms cryptographic dị iche iche gụnyere AES, Blowfish; MD5, MD4, SHA-1, SHA-2 ọrụ hash cryptographic; RSA, DSA, Diffie-Hellman igodo mgbanwe, Elliptic curve na ọtụtụ ndị ọzọ.

N'isiokwu a, anyị ga-akọwa otu esi etinye OpenSSL ọhụrụ kwụsiri ike site na isi mmalite na nkesa CentOS na Ubuntu.

Kwụpụ 1: Wụnye Ngwa Mmepe

1. Iji aka chịkọta OpenSSL site na isi mmalite, ị ga-ebu ụzọ wụnye ndabere ole na ole dị ka Ngwaọrụ mmepe n'okpuru RHEL/CentOS/Fedora ma ọ bụ build-essential na Debian/Ubuntu dị ka egosiri.

------------------- On CentOS, RHEL & Fedora ------------------- 
# yum group install 'Development Tools' && yum install perl-core libtemplate-perl zlib-devel 

------------------- On Ubuntu & Debian -------------------
$ sudo apt update && apt install build-essential checkinstall zlib1g-dev libtemplate-perl

Kwụpụ 2: Mepụta OpenSSL site na isi mmalite

2. Na-esote, budata ụdị kwụsiri ike ọhụrụ nke OpenSSL (v1.0.2 n'oge ederede, nke bụ ntọhapụ ogologo oge Nkwado (LTS), na-akwado ruo 31st Disemba 2019), site na ibe nbudata site na iji iwu tar.

$ wget -c https://www.openssl.org/source/openssl-1.0.2p.tar.gz
$ tar -xzvf openssl-1.0.2p.tar.gz

3. Ugbu a, banye n'ime ndekọ aha amịpụtara, hazie, wuo, mgbe arụchara nke ọma, nwalee ọba akwụkwọ wee wụnye OpenSSL na ebe ndabara, nke bụ/usr/local/ssl, site na ịme iwu ndị a.

$ cd openssl-1.0.2p/
$ ./config
$ make
$ make test
$ sudo make install 

4. Ozugbo i tinyechara OpenSSL nke ọma, ị nwere ike ịkwaga n'ime ndekọ nrụnye wee lelee akwụkwọ ndekọ aha na faịlụ dị iche iche site na iji iwu ls.

$ cd /usr/local/ssl/
$ ls -l

drwxr-xr-x. 2 root root  4096 Aug 22 06:37 bin
drwxr-xr-x. 2 root root  4096 Aug 22 06:37 certs
drwxr-xr-x. 3 root root  4096 Aug 22 06:37 include
drwxr-xr-x. 4 root root  4096 Aug 22 06:37 lib
drwxr-xr-x. 6 root root  4096 Aug 22 06:36 man
drwxr-xr-x. 2 root root  4096 Aug 22 06:37 misc
-rw-r--r--. 1 root root 10835 Aug 22 06:37 openssl.cnf
drwxr-xr-x. 2 root root  4096 Aug 22 06:37 private

Ndị a bụ akwụkwọ ndekọ aha dị mkpa ị kwesịrị ị mara:

  • bin - nwere ọnụọgụ abụọ openssl na ụfọdụ scripts bara uru.
  • gụnyere/openssl – nwere faịlụ nkụnye eji isi mee chọrọ maka iwulite mmemme nke gị na-eji libcrypto ma ọ bụ libssl.
  • lib – nwere faịlụ ọbaakwụkwọ OpenSSL.
  • lib/engine – nwere ngwa ngwa OpenSSL nwere ike ibugharị.
  • mmadụ - nwere ibe mmadụ OpenSSL.
  • share/doc/openssl/html - nwere nsụgharị HTML nke ibe mmadụ.
  • certs – ebe ndabere maka faịlụ asambodo.
  • onwe – ebe ndabere maka faịlụ igodo nzuzo.

5. Ka ịlele ụdị OpenSSL ị rụnyere, gbaa iwu a.

$ /usr/local/ssl/bin/openssl version

OpenSSL 1.0.2p  14 Aug 2018

6. Iji jiri ụdị OpenSSL arụnyere ọhụrụ na sistemụ gị, ịkwesịrị ịgbakwunye ndekọ/usr/local/ssl/bin/na PATH gị, na faịlụ ~/.bashrc (ma ọ bụ ihe kwekọrọ na shei gị).

$ vim ~/.bashrc

Tinye ahịrị a na ala nke faịlụ ahụ.

export PATH="/usr/local/ssl/bin:${PATH}"

Chekwaa ma mechie faịlụ ma bugharịa nhazi ahụ site na iji iwu dị n'okpuru.

$ source .bashrc

7. Ugbu a mepee windo ọnụ ọhụrụ ma mee iwu ndị a iji gosi na ọnụọgụ OpenSSL ọhụrụ dị na PATH gị na ị nwere ike ịgba ọsọ ya na-enweghị pịnye ụzọ ya zuru oke.

$ whereis openssl

openssl: /usr/bin/openssl /usr/lib64/openssl /usr/include/openssl /usr/local/ssl/bin/openssl /usr/share/man/man1/openssl.1ssl.gz
$ openssl version 	

OpenSSL 1.0.2p  14 Aug 2018

Ọ gwụla! N'ime edemede a, anyị akọwala otu esi etinye ụdị OpenSSL ọhụrụ site na isi iyi na sistemụ Linux. Ọ bụrụ na ị nwere ajụjụ ọ bụla, jiri akwụkwọ iwu dị n'okpuru ebe a ka iru anyị.