Compile OpenSSL from source on old Ubuntu

Hello,

If your version of Ubuntu is no longer supported you should update…
But in the meantime you could fix the broken or insecure packages on this way…

Note: Before continue check if you can get from a trusty source the package on DEB compiled that match your OS and architecture (and install it with: “dpkg -i file.deb”)


//before aptget: check that the sources are working!!!
//install prerequisites
apt-get install libssl-dev make gcc
//create a folder, download (openssl in this case, but can apply to any package) and decompress
wget http://openssl.org/source/openssl-1.0.1j.tar.gz
tar xfz openssl-1.0.1.tar.gz
//change to folder
cd openssl-*
//configure (take note of the paths!)
./config --prefix=/usr zlib-dynamic --openssldir=/etc/ssl shared
//compile
make
//install!
sudo make install

//use sudo if necessary (not just for make, for all commands)
//then if everything went ok check the version
openssl version -a

If you specifically do this to fix heartbleed or another critical vulnerability that leaked information, remember to replace SSL certificates with new ones and change users credentials…

//info from:
http://wiki.openssl.org/index.php/Compilation_and_Installation#Intel
http://mariobrandt.de/archives/linux/upgrading-openssl-on-debian-6-squeeze-or-ubuntu-8-04-hardy-456/
http://askubuntu.com/questions/133806/getting-an-error-when-using-make-command-installing-aircrack-ng-on-ubuntu-12
http://ubuntuforums.org/showthread.php?t=825560ddd

Regards,
AC.

This entry was posted in Linux, Medium Technical, Security and tagged , , , , , , , , , . Bookmark the permalink.

Comments are closed.