openssl-0.9.7a

Introduction to openssl

Download location (HTTP):       http://www.openssl.org/source/openssl-0.9.7a.tar.gz
Download location (FTP):        ftp://ftp.openssl.org/source/openssl-0.9.7a.tar.gz
Version used:                   0.9.7a
Package size:                   2.7 MB
Estimated Disk space required:  25.4 MB

The openssl package contains c_rehash, openssl, libcrypto and libssl. These are useful for providing cryptography functions to other packages, notably OpenSSH and web browsers (for accessing secure https sites).

Installation of openssl

Install openssl by running the following commands:

Note: GCC issues a warning on every compilation because the Configure command uses -m486 instead of -march=i486. To fix this behavior, use linux-ppro, linux-pentium or linux-k6 (depending on your architecture), instead of linux-elf.

sed 's/^passwd/openssl-passwd/' doc/apps/passwd.pod \
> doc/apps/openssl-passwd.pod &&
rm doc/apps/passwd.pod &&
./Configure linux-elf  --openssldir=/etc/ssl --prefix=/usr shared &&
make MANDIR=/usr/share/man &&
make MANDIR=/usr/share/man install &&
rmdir /etc/ssl/lib

Command explanations

rm doc/apps/passwd.pod : We do this because otherwise openssl installs its passwd man page over the existing system one which isn't what we want.

make MANDIR=/usr/share/man
make MANDIR=/usr/share/man install
These commands install openssl with the man pages in /usr/share/man instead of the default which is /etc/ssl/man.

rmdir /etc/ssl/lib : This is simply a tidy-up command. For some reason, the openssl install routine creates the /etc/ssl/lib directory even though the libraries have been installed in /usr/lib. We remove it to keep things nice and tidy!

Configuring Openssl

Config files

/etc/ssl/openssl.cnf

Configuration Information

Most people who just want to use openssl for providing functions to other programs such as OpenSSH and web browsers won't need to worry about configuring openssl. Configuring openssl is an advanced topic and so those who do would normally be expected to either know how to do it or to be able to find out how to do it.

Contents

The openssl package contains c_rehash, openssl, libcrypto libraries and libssl libraries.

Description

c_rehash

c_rehash is a perl script that scans all files in a directory and adds symbolic links to their hash values.

openssl

The openssl program is a command line tool for using the various cryptography functions of OpenSSL's crypto library from the shell. It can be used for various functions which are documented in man 1 openssl.

libcrypto

The OpenSSL crypto library implements a wide range of cryptographic algorithms used in various Internet standards. The services provided by this library are used by the OpenSSL implementations of SSL, TLS and S/MIME, and they have also been used to implement SSH, OpenPGP, and other cryptographic standards.

libssl

The OpenSSL ssl library implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols. It provides a rich API, documentation on which can be found by running man 3 ssl.