OpenSSL Upgrade

neodaemon · 10-13-2005, 09:14 PM

I've been searching 'n reading for 2 days, and can't find the answer. I have a good working knowledge of RPM's and building from source - but not combining the two.

Regarding the recent vulnerability identified in OpenSSL 0.9.7a - I want to upgrade my OpenSSL in Centos 4.1 (RHEL4). The existing OpenSSL 0.9.7a is querried via rpm -q openssl. The latest OpenSSL verions aren't available via rpm yet, but I have the source. So how to I upgrade an installed RPM with source?

Man, I'd really appreciate some insight here.

unSpawn · 10-14-2005, 05:51 AM

Running "rpm -tb openssl-0.9.8a.tar.gz" on the tarball should build the binary package because it contains a .spec file. Test broke here on the engine libs which are included by default. Basically RH .spec adds some CA and Perl stuff (check source tags), thread test, configures some defaults like "-Wa,--noexecstack" and install locations, so better check the OpenSSL spec against the spec from the last RHEL/CentOS-4.x openssl.src.rpm if you want to build a somewhat RHEL-compliant rpm.

neodaemon · 10-14-2005, 01:40 PM

Thank you for your reply. I will give that a shot.

-Much appreciated.