Solved

Upgrading OpenSSL

Posted on 2006-11-20
6
1,266 Views
Last Modified: 2013-12-27
Hi,

Can someone assist me in upgrading OpenSSL?  Please provide me with the standard way of upgrading from an older version of OpenSSL to a newer version on a Solaris 8 system.  I have gone through many sites, but each one provided their own way.  Your help is much appreciated.  

Thank you.
0
Comment
Question by:gsalcedo
  • 3
  • 2
6 Comments
 
LVL 48

Expert Comment

by:Tintin
ID: 17982934
I'd download the openssl package from http://sunfreeware.com/ 
It has the latest version available as well as the last two versions.
0
 

Author Comment

by:gsalcedo
ID: 17983049
Hi Tintin,

I did go through the process.  After going through the installation (./configure, make, make test & make install), I ran the command "ssh -V" and in return I noticed that it is still using the older version of OpenSSL.  When I go to the directory of where OpenSSL is installed (/usr/local/ssl), "cd" to bin (/usr/local/ssl/bin) and then typed "openssl version", I would then receive an output of the newer version that I installed.  How do I direct openssh to utilize the current OpenSSL?

Thank you....
0
 
LVL 48

Expert Comment

by:Tintin
ID: 17983144
You didn't mention openssh.

Why compile openssh?  Grab openssh from sunfreeware.com.  The version available is compiled against openssl 0.9.8d (the version you just installed)
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 

Author Comment

by:gsalcedo
ID: 17983419
Hi Tintin,

OpenSSH was installed with the orginal OpenSSL.  Part of the requirement to install OpenSSH is to install OpenSSL first.  Do I have to reinstall OpenSSH or upgrade it?
0
 
LVL 48

Expert Comment

by:Tintin
ID: 17983486
Is there a particular reason you want to upgrade?  Presumably security?

How did you install the original SSH and SSL versions?

In order to install openssh 4.4p1 from sunfreeware, you must install openssl 0.9.8d as well.
0
 
LVL 34

Accepted Solution

by:
PsiCop earned 50 total points
ID: 17986808
Actually, the latest OpenSSH is v4.5p1. Which may not be available yet thru sunfreeware.com. I don't think they added the requirement for OpenSSL v0.9.8d until OpenSSH v4.5p1.

I seem to recall that OpenSSH usually builds, on Solaris, with the static OpenSSL libraries. This means that upgrading OpenSSL does not immediately affect OpenSSH, because the libraries are not dynamic. OpenSSH has to be re-compiled or re-installed to take advantage of the newer OpenSSL.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Installing FreeBSD… FreeBSD is a darling of an operating system. The stability and usability make it a clear choice for servers and desktops (for the cunning). Savvy?  The Ports collection makes available every popular FOSS application and packag…
Java performance on Solaris - Managing CPUs There are various resource controls in operating system which directly/indirectly influence the performance of application. one of the most important resource controls is "CPU".   In a multithreaded…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now