> 本文作者：丁辉

# 安装OpenSSL

## 网络安装

- Centos安装

  ```bash
  yum install openssl openssl-devel -y
  ```

- Ubuntu安装

  ```bash
  apt install openssl libssl-dev -y
  ```

## 源码编译安装OpenSSL

[Downloads](https://www.openssl.org/source/)	[Old Releases](https://www.openssl.org/source/old/index.html)

1. 依赖安装

   - Centos安装

     ```bash
     yum install perl-IPC-Cmd zlib -y
     ```

   - Ubuntu安装

     暂未发现所需安装额外依赖

2. 下载源码包

   ```bash
   wget https://www.openssl.org/source/openssl-3.2.1.tar.gz --no-check-certificate
   ```

3. 解压

   ```bash
   tar -zxvf openssl-*.tar.gz && cd openssl-*
   ```

4. 配置编译项

   ```bash
   ./config --prefix=/usr/local/openssl --openssldir=/usr/local/openssl shared zlib
   ```

   > 指定静态库：`-fPIC`

5. 开始编译

   ```bash
   make & make install
   ```

   > 同时运行
   >
   > ```bash
   > make -j 4 & make install
   > ```

6. 移除旧版本

   ```bash
   mv /usr/bin/openssl /usr/bin/openssl.bak
   mv /usr/include/openssl/ /usr/include/openssl.bak
   ```

7. 创建软连接

   ```bash
   ln -s /usr/local/openssl/include/openssl /usr/include/openssl
   ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl
   ln -s /usr/local/openssl/lib/libssl.so.3 /usr/lib64/libssl.so.3
   ln -s /usr/local/openssl/lib/libcrypto.so.3 /usr/lib64/libcrypto.so.3
   ```

8. 添加到动态链接库

   ```bash
   echo "/usr/local/openssl/lib" >> /etc/ld.so.conf
   ldconfig
   ```

9. 验证

   ```bash
   openssl version
   ```