Hardened Linux From Scratch - Version SVN-20070501

Chapter 6. Installing Basic System Software

6.15. OpenSSL-0.9.8e

The OpenSSL package contains management tools and libraries relating to cryptography.

6.15.1. Installation of OpenSSL

Apply this patch to fix conflicts between OpenSSL manual pages and manual pages from other packages: 

patch -Np1 -i ../openssl-0.9.8e-fix_manpages-1.patch

You may wish to add extra -D definitions, such as NO_IDEA, NO_RC4, and NO_RC2 to disable weak alogorithms, REF_CHECK to add assertions, CRYPTO_MDEBUG and MFUNC to add extra memory checking code. Prepare OpenSSL for compilation: 

./config --openssldir=/etc/ssl --prefix=/usr shared zlib-dynamic \
    -DSSL_FORBID_ENULL

The meaning of the configure options:

--openssldir=/etc/ssl

This option tells OpenSSL to install and use configuration files from /etc/ssl.

shared

This option tells OpenSSL to build the shared libraries of OpenSSL.

zlib-dynamic

This option tells OpenSSL to use the Zlib shared library, rather than the static version.

-DSSL_FORBID_ENULL

This option will forbid the use of the NULL encryption cipher.

Compile the package: 

make MANDIR=/usr/share/man

To test the results, issue: make test.

Install the package: 

make MANDIR=/usr/share/man install
cp -v -r certs /etc/ssl

Install the documentation: 

install -v -d -m755 /usr/share/doc/openssl-0.9.8e
cp -v -r doc/{HOWTO,README,*.{txt,html,gif}} \
    /usr/share/doc/openssl-0.9.8e

Move the static libraries: 

mv -v /usr/lib/{libcrypto,libssl}.a /usr/lib/static

6.15.2. Contents of OpenSSL

Installed libraries: FIXME

Short Descriptions

FIXME

FIXME