source: postlfs/security/openssl.xml@ 6732c094

10.0 10.1 11.0 11.1 11.2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 krejzi/svn lazarus nosym perl-modules plabs/python-mods qt5new systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/soup3 xry111/test-20220226
Last change on this file since 6732c094 was 6732c094, checked in by Randy McMurchy <randy@…>, 16 years ago

Updated all the XML files (and the one stylesheet) to use the 4.5 version of DocBook XML DTD

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@6716 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 8.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY openssl-download-http "http://www.openssl.org/source/openssl-&openssl-version;.tar.gz">
8 <!ENTITY openssl-download-ftp "ftp://ftp.openssl.org/source/openssl-&openssl-version;.tar.gz">
9 <!ENTITY openssl-md5sum "3a7ff24f6ea5cd711984722ad654b927">
10 <!ENTITY openssl-size "3.3 MB">
11 <!ENTITY openssl-buildsize "42 MB">
12 <!ENTITY openssl-time "1.0 SBU (additional 0.3 SBU to run the test suite)">
13]>
14
15<sect1 id="openssl" xreflabel="OpenSSL-&openssl-version;">
16 <?dbhtml filename="openssl.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>OpenSSL-&openssl-version;</title>
24
25 <indexterm zone="openssl">
26 <primary sortas="a-OpenSSL">OpenSSL</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to OpenSSL</title>
31
32 <para>The <application>OpenSSL</application> package contains management
33 tools and libraries relating to cryptography. These are useful for
34 providing cryptography functions to other packages, notably
35 <application>OpenSSH</application>, email applications and web browsers
36 (for accessing HTTPS sites).</para>
37
38 <bridgehead renderas="sect3">Package Information</bridgehead>
39 <itemizedlist spacing="compact">
40 <listitem>
41 <para>Download (HTTP): <ulink url="&openssl-download-http;"/></para>
42 </listitem>
43 <listitem>
44 <para>Download (FTP): <ulink url="&openssl-download-ftp;"/></para>
45 </listitem>
46 <listitem>
47 <para>Download MD5 sum: &openssl-md5sum;</para>
48 </listitem>
49 <listitem>
50 <para>Download size: &openssl-size;</para>
51 </listitem>
52 <listitem>
53 <para>Estimated disk space required: &openssl-buildsize;</para>
54 </listitem>
55 <listitem>
56 <para>Estimated build time: &openssl-time;</para>
57 </listitem>
58 </itemizedlist>
59
60 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
61 <itemizedlist spacing='compact'>
62 <listitem>
63 <para>Required patch: <ulink
64 url="&patch-root;/openssl-&openssl-version;-fix_manpages-1.patch"/></para>
65 </listitem>
66 </itemizedlist>
67
68 <bridgehead renderas="sect3">OpenSSL Dependencies</bridgehead>
69
70 <bridgehead renderas="sect4">Optional</bridgehead>
71 <para role="optional"><xref linkend="bc"/> (recommended
72 if you run the test suite during the build)</para>
73
74 <para condition="html" role="usernotes">User Notes:
75 <ulink url='&blfs-wiki;/OpenSSL'/></para>
76
77 </sect2>
78
79 <sect2 role="installation">
80 <title>Installation of OpenSSL</title>
81
82 <!-- <para>To avoid a lot of warnings caused by using a deprecated compilation
83 option, run:</para>
84
85<screen><userinput>sed -i -e 's/mcpu/march/' config</userinput></screen> -->
86
87 <para>Install <application>OpenSSL</application> by running
88 the following commands:</para>
89
90<screen><userinput>patch -Np1 -i ../openssl-&openssl-version;-fix_manpages-1.patch &amp;&amp;
91./config --openssldir=/etc/ssl --prefix=/usr shared &amp;&amp;
92make MANDIR=/usr/share/man</userinput></screen>
93
94 <para>To test the results, issue: <command>make test</command>.</para>
95
96 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
97
98<screen role="root"><userinput>make MANDIR=/usr/share/man install &amp;&amp;
99cp -v -r certs /etc/ssl &amp;&amp;
100install -v -d -m755 /usr/share/doc/openssl-&openssl-version; &amp;&amp;
101cp -v -r doc/{HOWTO,README,*.{txt,html,gif}} \
102 /usr/share/doc/openssl-&openssl-version;</userinput></screen>
103
104 </sect2>
105
106 <sect2 role="commands">
107 <title>Command Explanations</title>
108
109 <para><option>no-rc5 no-idea</option>: When added to the
110 <command>./config</command> command, this will eliminate the building
111 of those encryption methods. Patent licenses may be needed for you to
112 utilize either of those methods in your projects.</para>
113
114 <para><command>make MANDIR=/usr/share/man; make MANDIR=/usr/share/man
115 install</command>: These commands install
116 <application>OpenSSL</application> with the man pages in
117 <filename class='directory'>/usr/share/man</filename> instead of
118 <filename class='directory'>/etc/ssl/man</filename>.</para>
119
120 <para><command>cp -v -r certs /etc/ssl</command>: The certificates must
121 be copied manually as the default installation skips this step.</para>
122
123 </sect2>
124
125 <sect2 role="configuration">
126 <title>Configuring OpenSSL</title>
127
128 <sect3 id="openssl-config">
129 <title>Config Files</title>
130
131 <para><filename>/etc/ssl/openssl.cnf</filename></para>
132
133 <indexterm zone="openssl openssl-config">
134 <primary sortas="e-etc-ssl-openssl.cnf">/etc/ssl/openssl.cnf</primary>
135 </indexterm>
136
137 </sect3>
138
139 <sect3>
140 <title>Configuration Information</title>
141
142 <para>Most people who just want to use <application>OpenSSL</application>
143 for providing functions to other programs such as
144 <application>OpenSSH</application> and web browsers won't need to worry
145 about configuring <application>OpenSSL</application>. Configuring
146 <application>OpenSSL</application> is an advanced topic and so those
147 who do would normally be expected to either know how to do it or to be
148 able to find out how to do it.</para>
149
150 </sect3>
151
152 </sect2>
153
154 <sect2 role="content">
155 <title>Contents</title>
156
157 <segmentedlist>
158 <segtitle>Installed Programs</segtitle>
159 <segtitle>Installed Libraries</segtitle>
160 <segtitle>Installed Directories</segtitle>
161
162 <seglistitem>
163 <seg>c_rehash and openssl</seg>
164 <seg>libcrypto.{so,a} and libssl.{so,a}</seg>
165 <seg>/etc/ssl, /usr/include/ssl, /usr/lib/engines
166 and /usr/share/doc/openssl-&openssl-version;</seg>
167 </seglistitem>
168 </segmentedlist>
169
170 <variablelist>
171 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
172 <?dbfo list-presentation="list"?>
173 <?dbhtml list-presentation="table"?>
174
175 <varlistentry id="c_rehash">
176 <term><command>c_rehash</command></term>
177 <listitem>
178 <para>is a <application>Perl</application> script that scans
179 all files in a directory and adds symbolic links to their hash
180 values.</para>
181 <indexterm zone="openssl c_rehash">
182 <primary sortas="b-c_rehash">c_rehash</primary>
183 </indexterm>
184 </listitem>
185 </varlistentry>
186
187 <varlistentry id="openssl-prog">
188 <term><command>openssl</command></term>
189 <listitem>
190 <para>is a command-line tool for using the various cryptography
191 functions of <application>OpenSSL</application>'s crypto
192 library from the shell. It can be used for various functions which are
193 documented in <command>man 1 openssl</command>.</para>
194 <indexterm zone="openssl openssl-prog">
195 <primary sortas="b-openssl">openssl</primary>
196 </indexterm>
197 </listitem>
198 </varlistentry>
199
200 <varlistentry id="libcrypto">
201 <term><filename class='libraryfile'>libcrypto.{so,a}</filename></term>
202 <listitem>
203 <para>implements a wide range of cryptographic algorithms used in
204 various Internet standards. The services provided by this library
205 are used by the <application>OpenSSL</application> implementations of
206 SSL, TLS and S/MIME, and they have also been used to implement
207 <application>OpenSSH</application>, <application>OpenPGP</application>,
208 and other cryptographic standards.</para>
209 <indexterm zone="openssl libcrypto">
210 <primary sortas="c-libcrypto">libcrypto.{so,a}</primary>
211 </indexterm>
212 </listitem>
213 </varlistentry>
214
215 <varlistentry id="libssl">
216 <term><filename class='libraryfile'>libssl.{so,a}</filename></term>
217 <listitem>
218 <para>implements the Secure Sockets Layer (SSL v2/v3) and Transport
219 Layer Security (TLS v1) protocols. It provides a rich API, documentation
220 on which can be found by running <command>man 3 ssl</command>.</para>
221 <indexterm zone="openssl libssl">
222 <primary sortas="c-libssl">libssl.{so,a}</primary>
223 </indexterm>
224 </listitem>
225 </varlistentry>
226
227 </variablelist>
228
229 </sect2>
230
231</sect1>
Note: See TracBrowser for help on using the repository browser.