Skip to content

Instantly share code, notes, and snippets.

@gwijayas
Last active July 25, 2025 08:22
Show Gist options
  • Save gwijayas/2d9d0a6b327ba55ad8ab8b5093c02e62 to your computer and use it in GitHub Desktop.
Save gwijayas/2d9d0a6b327ba55ad8ab8b5093c02e62 to your computer and use it in GitHub Desktop.
kompilasi openssl 3.0 di Ubuntu 14.04

Kompilasi openssl 3.0 di Ubuntu 14.04 (Trusty)

Lokasi hasil kompilasi ada di folder berbeda, dikarenakan ada program-program yang belum kompatibel dengan openssl 3.0, misal PHP < 8.1 tidak bisa menggunakannya.

export CFLAGS="-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security"
export CXXFLAGS="-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security"
export CPPFLAGS="-Wdate-time -D_FORTIFY_SOURCE=2" 
export LDFLAGS="-Wl,-rpath=/opt/retrofit2025/openssl30/lib64 -Wl,--enable-new-dtags -Wl,-Bsymbolic-functions -Wl,-z,relro"

./Configure  shared  no-idea no-mdc2 no-rc5 no-zlib no-ssl3 no-ssl3-method \
             enable-rfc3779 enable-cms no-capieng no-rdrand enable-ec_nistp_64_gcc_128 \
             --prefix=/opt/retrofit2025/openssl30 \
             --openssldir=/opt/retrofit2025/openssl30  linux-x86_64
make -j8
make test
make install 
wget -c https://curl.se/ca/cacert.pem -O /opt/retrofit2025/openssl30/cert.pem
#tes
/opt/retrofit2025/openssl30/bin/openssl s_client -showcerts -servername google.com \
                                        -connect google.com:443 2>/dev/null | openssl x509 -noout -enddate

Tes sederhana kompilasi PHP 8.3.23

export CFLAGS="-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security"
export CXXFLAGS="-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security"
export LDFLAGS="-Wl,-Bsymbolic-functions -Wl,-z,relro"
export OPENSSL_CFLAGS=-I/opt/retrofit2025/openssl30/include/
export OPENSSL_LIBS="-L/opt/retrofit2025/openssl30/lib64/ -lssl -lcrypto"

./configure --prefix=/opt/retrofit2025/php83 --with-openssl

# setelah make, dan make install, tes
$ ./sapi/cli/php -i|grep -i openssl
OpenSSL support => enabled
OpenSSL Library Version => OpenSSL 3.0.17 1 Jul 2025
OpenSSL Header Version => OpenSSL 3.0.17 1 Jul 2025
Openssl default config => /opt/retrofit2025/openssl30/openssl.cnf
openssl.cafile => no value => no value
openssl.capath => no value => no value
Native OpenSSL support => enabled

Variable OPENSSL_CFLAGS dan OPENSSL_LIBS yang ditampilkan dari ./configure --help

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment