Changeset 5a5bbbf


Ignore:
Timestamp:
05/14/2005 12:49:46 PM (19 years ago)
Author:
Manuel Canales Esparcia <manuel@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
2dbd7a5f
Parents:
93c27d5
Message:

Tagged openssl.xml

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@4206 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:
1 edited

Legend:

Unmodified
Added
Removed

  • postlfs/security/openssl.xml

    r93c27d5 r5a5bbbf  
    55  %general-entities;
    66
    7 <!ENTITY openssl-download-http "http://www.openssl.org/source/openssl-&openssl-version;.tar.gz">
    8 <!ENTITY openssl-download-ftp "ftp://ftp.openssl.org/source/openssl-&openssl-version;.tar.gz">
    9 <!ENTITY openssl-md5sum "b2d37d7eb8a5a5040d834105d5ae1a50">
    10 <!ENTITY openssl-size "3.0 MB">
    11 <!ENTITY openssl-buildsize "35 MB">
    12 <!ENTITY openssl-time "1.00 SBU">
     7  <!ENTITY openssl-download-http "http://www.openssl.org/source/openssl-&openssl-version;.tar.gz">
     8  <!ENTITY openssl-download-ftp "ftp://ftp.openssl.org/source/openssl-&openssl-version;.tar.gz">
     9  <!ENTITY openssl-md5sum "b2d37d7eb8a5a5040d834105d5ae1a50">
     10  <!ENTITY openssl-size "3.0 MB">
     11  <!ENTITY openssl-buildsize "35 MB">
     12  <!ENTITY openssl-time "1.00 SBU">
    1313]>
    1414
    1515<sect1 id="openssl" xreflabel="OpenSSL-&openssl-version;">
    16 <sect1info>
    17 <othername>$LastChangedBy$</othername>
    18 <date>$Date$</date>
    19 </sect1info>
    20 <?dbhtml filename="openssl.html"?>
    21 <title>OpenSSL-&openssl-version;</title>
    22 <indexterm zone="openssl">
    23 <primary sortas="a-OpenSSL">OpenSSL</primary></indexterm>
    24 
    25 <sect2>
    26 <title>Introduction to <application>Open<acronym>SSL</acronym></application>
    27 </title>
    28 
    29 <para>The <application>Open<acronym>SSL</acronym></application> package
    30 contains management tools and libraries relating to cryptography.  These are
    31 useful for providing cryptography functions to other packages, notably
    32 <application>OpenSSH</application>, email applications and web browsers (for
    33 accessing <acronym>HTTPS</acronym> sites).</para>
    34 
    35 <sect3><title>Package information</title>
    36 <itemizedlist spacing='compact'>
    37 <listitem><para>Download (HTTP):
    38 <ulink url="&openssl-download-http;"/></para></listitem>
    39 <listitem><para>Download (FTP):
    40 <ulink url="&openssl-download-ftp;"/></para></listitem>
    41 <listitem><para>Download MD5 sum: &openssl-md5sum;</para></listitem>
    42 <listitem><para>Download size: &openssl-size;</para></listitem>
    43 <listitem><para>Estimated disk space required:
    44 &openssl-buildsize;</para></listitem>
    45 <listitem><para>Estimated build time:
    46 &openssl-time;</para></listitem></itemizedlist>
    47 </sect3>
    48 
    49 <sect3><title>Additional downloads</title>
    50 <itemizedlist spacing='compact'>
    51 <listitem><para>Required patch: <ulink
    52 url="&patch-root;/openssl-&openssl-version;-fix_manpages-1.patch"/></para></listitem>
    53 </itemizedlist></sect3>
    54 
    55 <sect3><title><application>Open<acronym>SSL</acronym></application>
    56 dependencies</title>
    57 <sect4><title>Optional</title>
    58 <para><xref linkend="bc"/> (recommended
    59 if you run the test suite during the build)</para>
    60 </sect4>
    61 </sect3>
    62 
    63 </sect2>
    64 
    65 <sect2>
    66 <title>Installation of <application>Open<acronym>SSL</acronym></application>
    67 </title>
    68 
    69 <para>Install <application>Open<acronym>SSL</acronym></application> by running
    70 the following commands:</para>
    71 
    72 <screen><userinput><command>patch -Np1 -i ../openssl-&openssl-version;-fix_manpages-1.patch &amp;&amp;
     16  <?dbhtml filename="openssl.html"?>
     17
     18  <sect1info>
     19    <othername>$LastChangedBy$</othername>
     20    <date>$Date$</date>
     21  </sect1info>
     22
     23  <title>OpenSSL-&openssl-version;</title>
     24
     25  <indexterm zone="openssl">
     26    <primary sortas="a-OpenSSL">OpenSSL</primary>
     27  </indexterm>
     28
     29  <sect2 role="package">
     30    <title>Introduction to OpenSSL</title>
     31
     32    <para>The <application>OpenSSL</application> package contains management
     33    tools and libraries relating to cryptography.  These are useful for
     34    providing cryptography functions to other packages, notably
     35    <application>OpenSSH</application>, email applications and web browsers
     36    (for accessing HTTPS sites).</para>
     37
     38    <bridgehead renderas="sect3">Package Information</bridgehead>
     39    <itemizedlist spacing="compact">
     40      <listitem>
     41        <para>Download (HTTP): <ulink url="&openssl-download-http;"/></para>
     42      </listitem>
     43      <listitem>
     44        <para>Download (FTP): <ulink url="&openssl-download-ftp;"/></para>
     45      </listitem>
     46      <listitem>
     47        <para>Download MD5 sum: &openssl-md5sum;</para>
     48      </listitem>
     49      <listitem>
     50        <para>Download size: &openssl-size;</para>
     51      </listitem>
     52      <listitem>
     53        <para>Estimated disk space required: &openssl-buildsize;</para>
     54      </listitem>
     55      <listitem>
     56        <para>Estimated build time: &openssl-time;</para>
     57      </listitem>
     58    </itemizedlist>
     59
     60    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
     61    <itemizedlist spacing='compact'>
     62      <listitem>
     63        <para>Required patch: <ulink
     64        url="&patch-root;/openssl-&openssl-version;-fix_manpages-1.patch"/></para>
     65      </listitem>
     66    </itemizedlist>
     67
     68    <bridgehead renderas="sect3">OpenSSL Dependencies</bridgehead>
     69
     70    <bridgehead renderas="sect4">Optional</bridgehead>
     71    <para><xref linkend="bc"/> (recommended
     72    if you run the test suite during the build)</para>
     73
     74  </sect2>
     75
     76  <sect2 role="installation">
     77    <title>Installation of OpenSSL</title>
     78
     79    <para>Install <application>OpenSSL</application> by running
     80    the following commands:</para>
     81
     82<screen><userinput>patch -Np1 -i ../openssl-&openssl-version;-fix_manpages-1.patch &amp;&amp;
    7383./config --openssldir=/etc/ssl --prefix=/usr shared &amp;&amp;
    74 make MANDIR=/usr/share/man</command></userinput></screen>
    75 
    76 <para>To test the results, issue: <command>make test</command>.</para>
    77 
    78 <para>Now, as the root user:</para>
    79 
    80 <screen><userinput role='root'><command>make MANDIR=/usr/share/man install &amp;&amp;
    81 cp -r certs /etc/ssl</command></userinput></screen>
    82 
    83 </sect2>
    84 
    85 <sect2>
    86 <title>Command explanations</title>
    87 
    88 <para><option>no-rc5 no-idea</option>: When added to the
    89 <command>./config</command> command, this will eliminate the building of those
    90 encryption methods. Patent licenses may be needed for you to utilize either of
    91 those methods in your projects.</para>
    92 
    93 <para><command>make MANDIR=/usr/share/man; make MANDIR=/usr/share/man
    94 install</command>: These commands install
    95 <application>Open<acronym>SSL</acronym></application> with the man pages in
    96 <filename class='directory'>/usr/share/man</filename> instead of
    97 <filename class='directory'>/etc/ssl/man</filename>.</para>
    98 
    99 <para><command>cp -r certs /etc/ssl</command>: The certificates must be copied
    100 manually since the install script skips this step.</para>
    101 
    102 </sect2>
    103 
    104 <sect2>
    105 <title>Configuring <application>OpenSSL</application></title>
    106 
    107 <sect3 id="openssl-config"><title>Config files</title>
    108 <para><filename>/etc/ssl/openssl.cnf</filename></para>
    109 <indexterm zone="openssl openssl-config">
    110 <primary sortas="e-etc-ssl-openssl.cnf">/etc/ssl/openssl.cnf</primary>
    111 </indexterm>
    112 </sect3>
    113 
    114 <sect3><title>Configuration Information</title>
    115 
    116 <para>Most people who just want to use
    117 <application>Open<acronym>SSL</acronym></application> for providing functions
    118 to other programs such as <application>Open<acronym>SSH</acronym></application>
    119 and web browsers won't need to worry about configuring
    120 <application>Open<acronym>SSL</acronym></application>. Configuring
    121 <application>Open<acronym>SSL</acronym></application> is an advanced topic and
    122 so those who do would normally be expected to either know how to do it
    123 or to be able to find out how to do it.</para>
    124 </sect3>
    125 
    126 </sect2>
    127 
    128 <sect2>
    129 <title>Contents</title>
    130 
    131 <segmentedlist>
    132 <segtitle>Installed Programs</segtitle>
    133 <segtitle>Installed Libraries</segtitle>
    134 <segtitle>Installed Directories</segtitle>
    135 <seglistitem>
    136 <seg>c_rehash, openssl and openssl_fips_fingerprint</seg>
    137 <seg>libcrypto.[so,a] and libssl.[so,a]</seg>
    138 <seg>/etc/ssl and /usr/include/ssl</seg>
    139 </seglistitem>
    140 </segmentedlist>
    141 
    142 <variablelist>
    143 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
    144 <?dbfo list-presentation="list"?>
    145 
    146 <varlistentry id="c_rehash">
    147 <term><command>c_rehash</command></term>
    148 <listitem><para>is a <application>Perl</application> script that scans all
    149 files in a directory and adds symbolic links to their hash values.</para>
    150 <indexterm zone="openssl c_rehash">
    151 <primary sortas="b-c_rehash">c_rehash</primary></indexterm>
    152 </listitem>
    153 </varlistentry>
    154 
    155 <varlistentry id="openssl-prog">
    156 <term><command>openssl</command></term>
    157 <listitem><para>is a command-line tool for using the various cryptography
    158 functions of <application>Open<acronym>SSL</acronym></application>'s crypto
    159 library from the shell. It can be used for various functions which are
    160 documented in <command>man 1 openssl</command>.</para>
    161 <indexterm zone="openssl openssl-prog">
    162 <primary sortas="b-openssl">openssl</primary></indexterm>
    163 </listitem>
    164 </varlistentry>
    165 
    166 <varlistentry id="libcrypto">
    167 <term><filename class='libraryfile'>libcrypto.[so,a]</filename></term>
    168 <listitem><para>implements a wide range of cryptographic algorithms used in
    169 various Internet standards. The services provided by  this library are used by
    170 the <application>Open<acronym>SSL</acronym></application> implementations of
    171 <acronym>SSL</acronym>, <acronym>TLS</acronym> and <acronym>S/MIME</acronym>,
    172 and they have also been used to implement
    173 <application>Open<acronym>SSH</acronym></application>,
    174 <application>Open<acronym>PGP</acronym></application>, and other cryptographic
    175 standards.</para>
    176 <indexterm zone="openssl libcrypto">
    177 <primary sortas="c-libcrypto">libcrypto.[so,a]</primary></indexterm>
    178 </listitem>
    179 </varlistentry>
    180 
    181 <varlistentry id="libssl">
    182 <term><filename class='libraryfile'>libssl.[so,a]</filename></term>
    183 <listitem><para>implements the Secure Sockets Layer (<acronym>SSL</acronym>
    184 v2/v3) and Transport Layer Security (<acronym>TLS</acronym> v1) protocols. It
    185 provides a rich <acronym>API</acronym>, documentation on which can be found by
    186 running <command>man 3 ssl</command>.</para>
    187 <indexterm zone="openssl libssl">
    188 <primary sortas="c-libssl">libssl.[so,a]</primary></indexterm>
    189 </listitem>
    190 </varlistentry>
    191 </variablelist>
    192 
    193 </sect2>
     84make MANDIR=/usr/share/man</userinput></screen>
     85
     86    <para>To test the results, issue: <command>make test</command>.</para>
     87
     88    <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
     89
     90<screen role="root"><userinput>make MANDIR=/usr/share/man install &amp;&amp;
     91cp -v -r certs /etc/ssl</userinput></screen>
     92
     93  </sect2>
     94
     95  <sect2 role="commands">
     96    <title>Command Explanations</title>
     97
     98    <para><option>no-rc5 no-idea</option>: When added to the
     99    <command>./config</command> command, this will eliminate the building
     100    of those encryption methods. Patent licenses may be needed for you to
     101    utilize either of those methods in your projects.</para>
     102
     103    <para><command>make MANDIR=/usr/share/man; make MANDIR=/usr/share/man
     104    install</command>: These commands install
     105    <application>OpenSSL</application> with the man pages in
     106    <filename class='directory'>/usr/share/man</filename> instead of
     107    <filename class='directory'>/etc/ssl/man</filename>.</para>
     108
     109    <para><command>cp -v -r certs /etc/ssl</command>: The certificates must
     110    be copied manually since the install script skips this step.</para>
     111
     112  </sect2>
     113
     114  <sect2 role="configuration">
     115    <title>Configuring OpenSSL</title>
     116
     117    <sect3 id="openssl-config">
     118      <title>Config Files</title>
     119
     120      <para><filename>/etc/ssl/openssl.cnf</filename></para>
     121
     122      <indexterm zone="openssl openssl-config">
     123        <primary sortas="e-etc-ssl-openssl.cnf">/etc/ssl/openssl.cnf</primary>
     124      </indexterm>
     125
     126    </sect3>
     127
     128    <sect3>
     129      <title>Configuration Information</title>
     130
     131      <para>Most people who just want to use <application>OpenSSL</application>
     132      for providing functions to other programs such as
     133      <application>OpenSSH</application> and web browsers won't need to worry
     134      about configuring <application>OpenSSL</application>. Configuring
     135      <application>OpenSSL</application> is an advanced topic and so those
     136      who do would normally be expected to either know how to do it or to be
     137      able to find out how to do it.</para>
     138
     139    </sect3>
     140
     141  </sect2>
     142
     143  <sect2 role="content">
     144    <title>Contents</title>
     145
     146    <segmentedlist>
     147      <segtitle>Installed Programs</segtitle>
     148      <segtitle>Installed Libraries</segtitle>
     149      <segtitle>Installed Directories</segtitle>
     150
     151      <seglistitem>
     152        <seg>c_rehash, openssl, and openssl_fips_fingerprint</seg>
     153        <seg>libcrypto.[so,a] and libssl.[so,a]</seg>
     154        <seg>/etc/ssl and /usr/include/ssl</seg>
     155      </seglistitem>
     156    </segmentedlist>
     157
     158    <variablelist>
     159      <bridgehead renderas="sect3">Short Descriptions</bridgehead>
     160      <?dbfo list-presentation="list"?>
     161      <?dbhtml list-presentation="table"?>
     162
     163      <varlistentry id="c_rehash">
     164        <term><command>c_rehash</command></term>
     165        <listitem>
     166          <para>is a <application>Perl</application> script that scans
     167          all files in a directory and adds symbolic links to their hash
     168          values.</para>
     169          <indexterm zone="openssl c_rehash">
     170            <primary sortas="b-c_rehash">c_rehash</primary>
     171          </indexterm>
     172        </listitem>
     173      </varlistentry>
     174
     175      <varlistentry id="openssl-prog">
     176        <term><command>openssl</command></term>
     177        <listitem>
     178          <para>is a command-line tool for using the various cryptography
     179          functions of <application>OpenSSL</application>'s crypto
     180          library from the shell. It can be used for various functions which are
     181          documented in <command>man 1 openssl</command>.</para>
     182          <indexterm zone="openssl openssl-prog">
     183            <primary sortas="b-openssl">openssl</primary>
     184          </indexterm>
     185        </listitem>
     186      </varlistentry>
     187
     188      <varlistentry id="libcrypto">
     189        <term><filename class='libraryfile'>libcrypto.[so,a]</filename></term>
     190        <listitem>
     191          <para>implements a wide range of cryptographic algorithms used in
     192          various Internet standards. The services provided by  this library
     193          are used by the <application>OpenSSL</application> implementations of
     194          SSL, TLS and S/MIME, and they have also been used to implement
     195          <application>OpenSSH</application>, <application>OpenPGP</application>,
     196          and other cryptographic standards.</para>
     197          <indexterm zone="openssl libcrypto">
     198            <primary sortas="c-libcrypto">libcrypto.[so,a]</primary>
     199          </indexterm>
     200        </listitem>
     201      </varlistentry>
     202
     203      <varlistentry id="libssl">
     204        <term><filename class='libraryfile'>libssl.[so,a]</filename></term>
     205        <listitem>
     206          <para>implements the Secure Sockets Layer (SSL v2/v3) and Transport
     207          Layer Security (TLS v1) protocols. It provides a rich API, documentation
     208          on which can be found by running <command>man 3 ssl</command>.</para>
     209          <indexterm zone="openssl libssl">
     210            <primary sortas="c-libssl">libssl.[so,a]</primary>
     211          </indexterm>
     212        </listitem>
     213      </varlistentry>
     214
     215    </variablelist>
     216
     217  </sect2>
    194218
    195219</sect1>
Note: See TracChangeset for help on using the changeset viewer.