This commit is contained in:
Dirk Wetter 2014-07-04 14:37:15 +02:00
parent 2fe95cbe29
commit ebbef07785

View File

@ -39,11 +39,17 @@ If you want to compile OpenSSL yourself, here are the instructions:
3.) configure the damned thing. Options I used:
* for 64Bit:
./config --prefix=/usr/ --openssldir=/etc/ssl enable-zlib enable-ssl2 enable-rc5 enable-rc2 enable-GOST enable-cms enable-md2 enable-mdc2 enable-ec enable-ec2m enable-ecdh enable-ecdsa enable-seed enable-camellia enable-idea enable-rfc3779 enable-ec_nistp_64_gcc_128 --with-krb5-flavor=MIT experimental-jpake
**for 64Bit: **
* for 32 Bit:
./config --prefix=/usr/ --openssldir=/etc/ssl enable-zlib enable-ssl2 enable-rc5 enable-rc2 enable-GOST enable-cms enable-md2 enable-mdc2 enable-ec enable-ec2m enable-ecdh enable-ecdsa enable-seed enable-camellia enable-idea enable-rfc3779 no-ec_nistp_64_gcc_128 --with-krb5-flavor=MIT experimental-jpake
./config --prefix=/usr/ --openssldir=/etc/ssl enable-zlib enable-ssl2 enable-rc5 enable-rc2 enable-GOST \
enable-cms enable-md2 enable-mdc2 enable-ec enable-ec2m enable-ecdh enable-ecdsa enable-seed enable-camellia \
enable-idea enable-rfc3779 enable-ec_nistp_64_gcc_128 --with-krb5-flavor=MIT experimental-jpake
**for 32 Bit:**
./config --prefix=/usr/ --openssldir=/etc/ssl enable-zlib enable-ssl2 enable-rc5 enable-rc2 enable-GOST \
enable-cms enable-md2 enable-mdc2 enable-ec enable-ec2m enable-ecdh enable-ecdsa enable-seed enable-camellia \
enable-idea enable-rfc3779 no-ec_nistp_64_gcc_128 --with-krb5-flavor=MIT experimental-jpake
Don't use -DTEMP_GOST_TLS, it breaks things!
@ -57,14 +63,11 @@ as you don't want your openssl binary to end up loading system libraries like li
libcrypto. Alternatively you can hack the Makefile and include those
libs which you compiled statically as ".a".
4.)
make depend
4.) make depend
5.)
make
5.) make
6.)
make report (check whether it runs ok)
6.) make report (check whether it runs ok)
7.) "openssl ciphers -V ALL:COMPLEMENTOFALL | wc -l" lists for me w/ kerberos and w/o GOST cipher engine
167 ciphers as opposed to 111/109 from Ubuntu or Opensuse.
@ -73,7 +76,7 @@ libs which you compiled statically as ".a".
**Never use these binaries for anything else then for testing**
Enjoy! Dirk
Enjoy, Dirk
[1] https://en.wikipedia.org/wiki/GOST_%28block_cipher%29
[1] https://en.wikipedia.org/wiki/GOST_%29block_cipher%29