First, I tried downloading the source tarball openssl-1.0.1s.tar.gz
from openssl.org and doing a ./config && make install
, and although it seems to have completed the process successfully, I don't know where the compiled code went or if it got installed at all, because I still have a very old version of openssl linked in /usr/bin/
, sothat didn't seem to work.
[root@E345 openssl]# openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013
Then, I tried downloading the rpm package and installing with rpm -Uvh
and it seemed to install correctly, but with a ton of warnings, and the same exact result as above,
[root@E345 openssl]# rpm -Uvh openssl-1.0.1e-42.el7.9.src.rpm
Updating / installing...
1:openssl-1:1.0.1e-42.el7.9 ################################# [100%]
warning: user mockbuild does not exist - using root
warning: group mockbuild does not exist - using root
warning: user mockbuild does not exist - using root
warning: group mockbuild does not exist - using root
There are about 30 or 40 of those same two warnings.
Again, after installing the rpm, the same output is given:
[root@E345 openssl]# openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013
What am I doing wrong / misunderstanding?
Edit: accidentally pasted the wrong OpenSSL version from another machine
yum
meets this requirement.yum check-update
reports no updates available, even before I installed the new version. The system came with1.0.1e-fips
from Feb 2013. The rpm I downloaded,1.0.1e-42
, does include ECDSA, but installing it withrpm -Uvh
didn't link the necessary libraries to/usr/bin
and/usr/lib64
which is whereyum
,ssh
, and other programs pull from. I ended up compilingopenssl-1.0.1l
and linking the libraries myself, which seems dangerous and weird, but it works.openssl-devel
. And yes, what you did is dangerous. Now your software has security vulnerabilities that have been fixed for a very long time.