openssl 编译安装

一时失言乱红尘 2022-05-07 03:56 248阅读 0赞

官方下载地址：https://www.openssl.org/source/  
  
\#解压  
$ tar -zxvf openssl-1.1.0h.tar.gz  
$ cd openssl-1.1.0h  
  
\#配置（使用sudo是因为要prefix的访问权限）  
$ sudo ./config --prefix=/usr/local/openssl  
该步骤出现如下警告  
***Configured for darwin-i386-cc.  
wanzhihuideMacBook-Pro:openssl-1.1.0h wanzhihui$ sudo ./config --prefix=/usr/local/ --openssldir=/usr/local/openssl darwin64-x86\_64-cc  
Operating system: i686-apple-darwinDarwin Kernel Version 15.0.0: Sat Sep 19 15:53:46 PDT 2015; root:xnu-3247.10.11~1/RELEASE\_X86\_64  
WARNING! If you wish to build 64-bit library, then you have to  
         invoke './Configure darwin64-x86\_64-cc' \*manually\*.  
         You have about 5 seconds to press Ctrl-C to abort.***  
openssl/config脚本会根据$KERNEL\_BITS来判断是否开启x86\_64编译，默认是不开启的，所以你生成的openssl库文件是32位的，最后静态链接到nginx会出错。  
解决方法：  
找到makefile将里面的PLATFORM=dist改成  
PLATFORM=darwin64-x86\_64-cc  
  
\#配置、编译和安装  
$ export KERNEL\_BITS=64  
$ sudo ./config darwin64-x86\_64-cc  --prefix=/usr/local/openssl  
$ sudo make  
$ sudo make install  
  
\#查看版本  
$ openssl version  
  
  
不编译64位的在安装nginx时会报链接错误：  
***-L/usr/local/lib -lpcre /usr/local/openssl/lib/libssl.a /usr/local/openssl/lib/libcrypto.a -lz  
ld: warning: ignoring file /usr/local/openssl/lib/libssl.a, file was built for archive which is not the architecture being linked (x86\_64): /usr/local/openssl/lib/libssl.a  
ld: warning: ignoring file /usr/local/openssl/lib/libcrypto.a, file was built for archive which is not the architecture being linked (x86\_64): /usr/local/openssl/lib/libcrypto.a  
Undefined symbols for architecture x86\_64:  
  "\_ASN1\_GENERALIZEDTIME\_print", referenced from:  
      \_ngx\_ssl\_stapling\_ocsp\_handler in ngx\_event\_openssl\_stapling.o  
  "\_ASN1\_d2i\_bio", referenced from:  
      \_ngx\_ssl\_stapling in ngx\_event\_openssl\_stapling.o  
  "\_BIO\_ctrl", referenced from:  
      \_ngx\_ssl\_get\_raw\_certificate in ngx\_event\_openssl.o  
      \_ngx\_ssl\_get\_serial\_number in ngx\_event\_openssl.o  
      \_ngx\_ssl\_stapling\_ocsp\_handler in ngx\_event\_openssl\_stapling.o  
  "\_BIO\_free", referenced from:***