Compile and Install OPENSSL-1.1.0 on CentOS7

The latest stable version is the 1.1.0 series. The 1.0.2 series is our Long Term Support (LTS) release, supported until 31st December 2019. The 0.9.8, 1.0.0 and 1.0.1 versions are now out of support and should not be used.

Check the current openssl version.

1

openssl version

Download openssl tarball file from official website.

1

wget https://www.openssl.org/source/openssl-1.1.0h.tar.gz

Decompress and configure the package.

1
2
3

tar -zxf openssl-1.1.0h.tar.gz
cd openssl-1.1.0h.tar.gz
./config

If everything goes well, you will see image blow, if not, please follow the instruction returned to solve the problems.

Make and install package. If you are using user privileges, make sure to use sudo.

1

make && make install

If everything goes well, the process will end without error msg.

The new openssl binary file is placed at /usr/local/bin, so right now, there are two openssl binary files exist in the system.

But the current connection is still using the old version of openssl, even though which command shows the new location of openssl.

All we have to do is re-login the server to fresh the connection.

REFERENCES:
Openssl-Download Page