This commit is contained in:
Dirk Wetter 2014-07-04 14:15:45 +02:00
parent ceb1d7e623
commit cf4408c783

View File

@ -2,10 +2,10 @@
Compilation instructions Compilation instructions
======================== ========================
Currrent precompiled versions are are from OpenSSL 1.0.2. The precompiled versions here are from OpenSSL 1.0.2 and
The ones I were using is a fork of OpenSSL from Peter Mosmans, they are a fork of OpenSSL from Peter Mosmans,
just to get chacha20+poly1305 support (thx!). The one from just to get chacha20+poly1305 support (thx!). The one from
the official git repo didn't work for me work correctly, the official git repo didn't work for me work correctly,
it's also likely they'll disappear shortly it's also likely they'll disappear shortly
(https://www.mail-archive.com/openssl-dev@openssl.org/msg34756.html). (https://www.mail-archive.com/openssl-dev@openssl.org/msg34756.html).
@ -40,10 +40,10 @@ If you want to compile OpenSSL yourself, here are the instructions:
3.) configure the damned thing. Options I used: 3.) configure the damned thing. Options I used:
* for 64Bit: * for 64Bit:
>./config --prefix=/usr/ --openssldir=/etc/ssl enable-zlib enable-ssl2 enable-rc5 enable-rc2 enable-GOST enable-cms enable-md2 enable-mdc2 enable-ec enable-ec2m enable-ecdh enable-ecdsa enable-seed enable-camellia enable-idea enable-rfc3779 enable-ec_nistp_64_gcc_128 --with-krb5-flavor=MIT experimental-jpake ./config --prefix=/usr/ --openssldir=/etc/ssl enable-zlib enable-ssl2 enable-rc5 enable-rc2 enable-GOST enable-cms enable-md2 enable-mdc2 enable-ec enable-ec2m enable-ecdh enable-ecdsa enable-seed enable-camellia enable-idea enable-rfc3779 enable-ec_nistp_64_gcc_128 --with-krb5-flavor=MIT experimental-jpake
* for 32 Bit: * for 32 Bit:
> ./config --prefix=/usr/ --openssldir=/etc/ssl enable-zlib enable-ssl2 enable-rc5 enable-rc2 enable-GOST enable-cms enable-md2 enable-mdc2 enable-ec enable-ec2m enable-ecdh enable-ecdsa enable-seed enable-camellia enable-idea enable-rfc3779 no-ec_nistp_64_gcc_128 --with-krb5-flavor=MIT experimental-jpake ./config --prefix=/usr/ --openssldir=/etc/ssl enable-zlib enable-ssl2 enable-rc5 enable-rc2 enable-GOST enable-cms enable-md2 enable-mdc2 enable-ec enable-ec2m enable-ecdh enable-ecdsa enable-seed enable-camellia enable-idea enable-rfc3779 no-ec_nistp_64_gcc_128 --with-krb5-flavor=MIT experimental-jpake
Don't use -DTEMP_GOST_TLS, it breaks things! Don't use -DTEMP_GOST_TLS, it breaks things!
@ -57,15 +57,19 @@ as you don't want your openssl binary to end up loading system libraries like li
libcrypto. Alternatively you can hack the Makefile and include those libcrypto. Alternatively you can hack the Makefile and include those
libs which you compiled statically as ".a". libs which you compiled statically as ".a".
4.) make depend 4.)
make depend
5.) make 5.)
make
6.) make report (check whether it runs ok) 6.)
make report (check whether it runs ok)
7.) "openssl ciphers -V ALL:COMPLEMENTOFALL | wc -l" lists for me w/ kerberos and w/o GOST cipher engine 7.) "openssl ciphers -V ALL:COMPLEMENTOFALL | wc -l" lists for me w/ kerberos and w/o GOST cipher engine
167 ciphers as opposed to 111/109 from Ubuntu or Opensuse. 167 ciphers as opposed to 111/109 from Ubuntu or Opensuse.
**Never use these binaries for anything else then for testing** **Never use these binaries for anything else then for testing**