I’m trying to update from RHEL8 default openssl 1.1.1k to openssl 1.1.1w.
The compilation proceeded as follows.
tar xzf openssl-$OPENSSL.tar.gz
cd opensl-$OPENSSL
./config --prefix=/usr/local/openssl --openssldir=/usr/local/openssl shared zlib enable-md2
make & & make install
After that, I checked the version and it came out the same as openssl 1.1.1k
mv /usr/bin/openssl /usr/bin/openssl_back
ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl
I held the symbolic link with the command.
After that, I checked the version and it came up as OpenSSL 1.1.1w 11 Sep 2023 (Library: OpenSSL 1.1.1k FIPS 25 Mar 2021).
enter image description here
After Googling, I grabbed the link to libssl.so .1.1, libcrypto.so .1.1 and the version came out normally.
rm -rf libssl.so.1.1
rm -rf libcrypto.so.1.1
ln -s /usr/local/openssl/lib/libssl.so.1.1 /usr/lib64/libssl.so.1.1
ln -s /usr/local/openssl/lib/libcrypto.so.1.1 /usr/lib64/libcrypto.so.1.1
enter image description here
However, only openssl appeared normally, and basic commands such as rpm, yum, and sudo began dont work
enter image description here
libk5crypto.so seems to be colliding, but if you do ldconfig, it works normally
but again, look at the openssl library 1.1.1k.
What should I do?
I’m trying to take action because openssl 1.1.1k has a vulnerability, but if I use 1.1.1w for openssl and look at 1.1.1k for the library, does the vulnerability solve?
After patching with openssl 1.1.1w, I grabbed the symbolic link.
I didn’t even need to grab a symbol link in the existing rhel 7 and 6 and I thought it would be fine because it was patched right away.
However, the rhel8 seems to be working a little differently than before.
When I grab the link, other commands won’t work and I’m wondering what to do.
유한음 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.