source: postlfs/security/openssl.xml@ 8a284147

10.0 10.1 11.0 11.1 11.2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 krejzi/svn lazarus nosym perl-modules plabs/python-mods qt5new systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/soup3 xry111/test-20220226
Last change on this file since 8a284147 was 8a284147, checked in by DJ Lucas <dj@…>, 15 years ago

Updated to openssl-0.9.8g.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@7180 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 8.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY openssl-download-http "http://www.openssl.org/source/openssl-&openssl-version;.tar.gz">
8 <!ENTITY openssl-download-ftp "ftp://ftp.openssl.org/source/openssl-&openssl-version;.tar.gz">
9 <!ENTITY openssl-md5sum "acf70a16359bf3658bdfb74bda1c4419">
10 <!ENTITY openssl-size "3.2 MB">
11 <!ENTITY openssl-buildsize "40 MB">
12 <!ENTITY openssl-time "1.2 SBU (additional 0.5 SBU to run the test suite)">
13]>
14
15<sect1 id="openssl" xreflabel="OpenSSL-&openssl-version;">
16 <?dbhtml filename="openssl.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>OpenSSL-&openssl-version;</title>
24
25 <indexterm zone="openssl">
26 <primary sortas="a-OpenSSL">OpenSSL</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to OpenSSL</title>
31
32 <para>The <application>OpenSSL</application> package contains management
33 tools and libraries relating to cryptography. These are useful for
34 providing cryptography functions to other packages, notably
35 <application>OpenSSH</application>, email applications and web browsers
36 (for accessing HTTPS sites).</para>
37
38 <bridgehead renderas="sect3">Package Information</bridgehead>
39 <itemizedlist spacing="compact">
40 <listitem>
41 <para>Download (HTTP): <ulink url="&openssl-download-http;"/></para>
42 </listitem>
43 <listitem>
44 <para>Download (FTP): <ulink url="&openssl-download-ftp;"/></para>
45 </listitem>
46 <listitem>
47 <para>Download MD5 sum: &openssl-md5sum;</para>
48 </listitem>
49 <listitem>
50 <para>Download size: &openssl-size;</para>
51 </listitem>
52 <listitem>
53 <para>Estimated disk space required: &openssl-buildsize;</para>
54 </listitem>
55 <listitem>
56 <para>Estimated build time: &openssl-time;</para>
57 </listitem>
58 </itemizedlist>
59
60 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
61 <itemizedlist spacing='compact'>
62 <listitem>
63 <para>Required patch: <ulink
64 url="&patch-root;/openssl-&openssl-version;-fix_manpages-1.patch"/></para>
65 </listitem>
66 </itemizedlist>
67
68 <bridgehead renderas="sect3">OpenSSL Dependencies</bridgehead>
69
70 <bridgehead renderas="sect4">Optional</bridgehead>
71 <para role="optional"><xref linkend="bc"/> (recommended
72 if you run the test suite during the build)</para>
73
74 <para condition="html" role="usernotes">User Notes:
75 <ulink url='&blfs-wiki;/OpenSSL'/></para>
76
77 </sect2>
78
79 <sect2 role="installation">
80 <title>Installation of OpenSSL</title>
81
82 <para>Install <application>OpenSSL</application> by running
83 the following commands:</para>
84
85<screen><userinput>patch -Np1 -i ../openssl-&openssl-version;-fix_manpages-1.patch &amp;&amp;
86./config --openssldir=/etc/ssl --prefix=/usr shared &amp;&amp;
87make MANDIR=/usr/share/man</userinput></screen>
88
89 <para>To test the results, issue: <command>make test</command>.</para>
90
91 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
92
93<screen role="root"><userinput>make MANDIR=/usr/share/man install &amp;&amp;
94cp -v -r certs /etc/ssl &amp;&amp;
95install -v -d -m755 /usr/share/doc/openssl-&openssl-version; &amp;&amp;
96cp -v -r doc/{HOWTO,README,*.{txt,html,gif}} \
97 /usr/share/doc/openssl-&openssl-version;</userinput></screen>
98
99 </sect2>
100
101 <sect2 role="commands">
102 <title>Command Explanations</title>
103
104 <para><option>no-rc5 no-idea</option>: When added to the
105 <command>./config</command> command, this will eliminate the building
106 of those encryption methods. Patent licenses may be needed for you to
107 utilize either of those methods in your projects.</para>
108
109 <para><command>make MANDIR=/usr/share/man; make MANDIR=/usr/share/man
110 install</command>: These commands install
111 <application>OpenSSL</application> with the man pages in
112 <filename class='directory'>/usr/share/man</filename> instead of
113 <filename class='directory'>/etc/ssl/man</filename>.</para>
114
115 <para><command>cp -v -r certs /etc/ssl</command>: The certificates must
116 be copied manually as the default installation skips this step.</para>
117
118 </sect2>
119
120 <sect2 role="configuration">
121 <title>Configuring OpenSSL</title>
122
123 <sect3 id="openssl-config">
124 <title>Config Files</title>
125
126 <para><filename>/etc/ssl/openssl.cnf</filename></para>
127
128 <indexterm zone="openssl openssl-config">
129 <primary sortas="e-etc-ssl-openssl.cnf">/etc/ssl/openssl.cnf</primary>
130 </indexterm>
131
132 </sect3>
133
134 <sect3>
135 <title>Configuration Information</title>
136
137 <para>Most people who just want to use <application>OpenSSL</application>
138 for providing functions to other programs such as
139 <application>OpenSSH</application> and web browsers won't need to worry
140 about configuring <application>OpenSSL</application>. Configuring
141 <application>OpenSSL</application> is an advanced topic and so those
142 who do would normally be expected to either know how to do it or to be
143 able to find out how to do it.</para>
144
145 </sect3>
146
147 </sect2>
148
149 <sect2 role="content">
150 <title>Contents</title>
151
152 <segmentedlist>
153 <segtitle>Installed Programs</segtitle>
154 <segtitle>Installed Libraries</segtitle>
155 <segtitle>Installed Directories</segtitle>
156
157 <seglistitem>
158 <seg>c_rehash and openssl</seg>
159 <seg>libcrypto.{so,a}, libssl.{so,a}, and additional encryption
160 libraries in /usr/lib/engines/ (lib4758cca.so, libaep.so,
161 libatalla.so, libchil.so, libcswift.so, libgmp.so, libnuron.so,
162 libsureware.so and libubsec.so)</seg>
163 <seg>/etc/ssl, /usr/include/ssl, /usr/lib/engines
164 and /usr/share/doc/openssl-&openssl-version;</seg>
165 </seglistitem>
166 </segmentedlist>
167
168 <variablelist>
169 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
170 <?dbfo list-presentation="list"?>
171 <?dbhtml list-presentation="table"?>
172
173 <varlistentry id="c_rehash">
174 <term><command>c_rehash</command></term>
175 <listitem>
176 <para>is a <application>Perl</application> script that scans
177 all files in a directory and adds symbolic links to their hash
178 values.</para>
179 <indexterm zone="openssl c_rehash">
180 <primary sortas="b-c_rehash">c_rehash</primary>
181 </indexterm>
182 </listitem>
183 </varlistentry>
184
185 <varlistentry id="openssl-prog">
186 <term><command>openssl</command></term>
187 <listitem>
188 <para>is a command-line tool for using the various cryptography
189 functions of <application>OpenSSL</application>'s crypto
190 library from the shell. It can be used for various functions which are
191 documented in <command>man 1 openssl</command>.</para>
192 <indexterm zone="openssl openssl-prog">
193 <primary sortas="b-openssl">openssl</primary>
194 </indexterm>
195 </listitem>
196 </varlistentry>
197
198 <varlistentry id="libcrypto">
199 <term><filename class='libraryfile'>libcrypto.{so,a}</filename></term>
200 <listitem>
201 <para>implements a wide range of cryptographic algorithms used in
202 various Internet standards. The services provided by this library
203 are used by the <application>OpenSSL</application> implementations of
204 SSL, TLS and S/MIME, and they have also been used to implement
205 <application>OpenSSH</application>, <application>OpenPGP</application>,
206 and other cryptographic standards.</para>
207 <indexterm zone="openssl libcrypto">
208 <primary sortas="c-libcrypto">libcrypto.{so,a}</primary>
209 </indexterm>
210 </listitem>
211 </varlistentry>
212
213 <varlistentry id="libssl">
214 <term><filename class='libraryfile'>libssl.{so,a}</filename></term>
215 <listitem>
216 <para>implements the Secure Sockets Layer (SSL v2/v3) and Transport
217 Layer Security (TLS v1) protocols. It provides a rich API, documentation
218 on which can be found by running <command>man 3 ssl</command>.</para>
219 <indexterm zone="openssl libssl">
220 <primary sortas="c-libssl">libssl.{so,a}</primary>
221 </indexterm>
222 </listitem>
223 </varlistentry>
224
225 </variablelist>
226
227 </sect2>
228
229</sect1>
Note: See TracBrowser for help on using the repository browser.