OpenSSL 1.1.1 systemwide (Ubuntu 18.04 / Debian 9.x)


Following this guide you will manually Install the latest OpenSSL on Ubuntu 18.04.1: “…OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols…” Source: [OpenSSL]


Ubuntu:

sudo -s

Debian:

su -
apt install make gcc -y
cd /usr/local/src
wget https://www.openssl.org/source/openssl-1.1.1a.tar.gz
tar xvf openssl-1.1.1a.tar.gz
cd openssl-1.1.1a
./config -Wl,--enable-new-dtags,-rpath,'$(LIBRPATH)'

make

make install

add

MANPATH_MAP     /usr/local/ssl/bin      /usr/local/ssl/man

to /etc/manpath.config

vi /etc/manpath.config

mandb

On Ubuntu add

/usr/local/ssl/bin:

to /etc/environment

vi /etc/environment

Then reboot your server and verify openssl

reboot now

Some apps now use the new version of OpenSSL out of the box, except others as NGINX: those are linked against the “old” libraries from the native Ubuntu. Issuing

openssl version

will show the latest openSSL for your system.



Carsten Rieger

Carsten Rieger

Carsten Rieger is a senior system engineer in full-time and also working as an IT freelancer. He is working with linux environments for more than 13 years, an Open Source enthusiast and highly motivated on linux installation and troubleshooting. Mostly working with Debian/Ubuntu Linux, Nginx and Apache web server, MariaDB/MySQL/PostgreSQL, PHP, Cloud infrastructure (e.g. Nextcloud) and other open source projects (e.g. Roundcube) and in voluntary work for the Dr. Michael & Angela Jacobi Stiftung for more than 6 years.

3 Responses

  1. Franko says:

    which openssl

    /usr/bin/openssl

  2. Franko says:

    Hallo Carsten

    bin hier nach deiner Anleitung vorgegangen (Debian 9), aber leider sieht das Ergebnis bei mir so aus :
    openssl version OpenSSL 1.1.1 11 Sep 2018
    hatte vorher das installiert ->
    https://www.c-rieger.de/ubuntu-debian-nginx-openssl-1-1-1/

    MfG Franko

Leave a Reply

Your email address will not be published. Required fields are marked *