update OpenSSL 1.0.2k-fips to openssl 1.1.1

[rahman051]

Hello
This version is installed on all servers :
OpenSSL 1.0.2k-fips 26 Jan 2017

How to update it to the new version :

Downloads | OpenSSL Library

Apache HTTP Server version 2.4.43 or newer is required in order to operate a TLS 1.3 web server with OpenSSL 1.1.1.

Is this update correct?

yum -y install openssl openssl-devel perl-core zlib-devel
cd /usr/local/
wget https://www.openssl.org/source/openssl-1.1.1g.tar.gz
tar xzf openssl-1.1.1g.tar.gz
./config --prefix=/usr no-threads shared
make
make install
openssl version

AND :

cd /usr/local/directadmin/custombuild
./build update
./build set ssl_configuration intermediate
./build apache
./build php
./build rewrite_confs

After updating, many services still display the previous version, such as :
named -V
,....

linked to OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017

Should the files be linked in a way that all services use the new version ?

Please help to update

 

[ben29]

don't upgrade using source code... unless you know what are you doing.
you may break your server.

the best way to upgrade is by your package manager
yum/apt

and don't forget to recomple everything with new version of openssl

 

[rahman051]

don't upgrade using source code... unless you know what are you doing.
you may break your server.

the best way to upgrade is by your package manager
yum/apt

and don't forget to recomple everything with new version of openssl

Thanks for your reply
We have to find the right solution
With yum/apt Unable to update
There is an update only in the Centos 8 version
We want to do it in the previous version " Centos 7"

Help if there is a solution

 

[ben29]

Thanks for your reply
We have to find the right solution
With yum/apt Unable to update
There is an update only in the Centos 8 version
We want to do it in the previous version " Centos 7"

Help if there is a solution

if you running

yum update openssl\*

and there is no update...you good to go.

you can always upgrade to last version with compile the openssl.

but be careful about that