修復openssl漏洞，升級openssl

一、查看源版本

[root@zj ~]# openssl version -a

OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008

二、下載openssl-1.0.1g.tar.gz

wget https://www.openssl.org/source/openssl-1.0.2j.tar.gz

三、更新zlib

yum install -y zlib

四、解壓安裝

tar zxf openssl-1.0.1g.tar.gz

cd openssl-1.0.1g

./config shared zlib

make

make install

/usr/local/ssl/bin/openssl version -a

顯示最新的OpenSSL版本信息：

mv /usr/bin/openssl /usr/bin/openssl.bak

mv /usr/include/openssl /usr/include/openssl.bak

ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl

ln -s /usr/local/ssl/include/openssl /usr/include/openssl

echo 「/usr/local/ssl/lib」 >> /etc/ld.so.conf

ldconfig -v

五、查看是否升級成功

[root@zj ~]# openssl version -a

OpenSSL 1.0.1g 7 Apr 2014