How To Install OpenSSL on AlmaLinux 9

OpenSSL is a robust, full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. It’s an essential component for securing network communications and is widely used in web servers, email systems, and various other applications. This guide will walk you through the process of installing OpenSSL on AlmaLinux 9, a free and open-source enterprise-grade Linux distribution that’s binary compatible with Red Hat Enterprise Linux (RHEL).

AlmaLinux 9, being a relatively new distribution, comes with its own set of challenges when it comes to software installation. However, with the right approach, installing OpenSSL can be a straightforward process. Whether you’re a system administrator, developer, or simply an enthusiast looking to enhance your system’s security, this guide will provide you with the knowledge and steps necessary to successfully install OpenSSL on your AlmaLinux 9 system.

Prerequisites

Before we dive into the installation process, ensure that you have the following:

• A system running AlmaLinux 9
• Root access or sudo privileges on your AlmaLinux 9 system
• A stable internet connection for downloading packages
• Basic familiarity with the Linux command line interface
• Sufficient disk space (at least 100 MB) for the installation

It’s also recommended to have a backup of your important data before proceeding with any system modifications. While the installation process is generally safe, it’s always better to be prepared for any unforeseen issues.

Step 1: Update Your System

Before installing any new software, it’s crucial to ensure that your system is up to date. This helps prevent potential conflicts and ensures that you have the latest security patches. To update your AlmaLinux 9 system, open a terminal and run the following commands:

sudo dnf check-update
sudo dnf upgrade -y

The first command checks for available updates, while the second command applies these updates. The ‘-y’ flag automatically answers “yes” to any prompts, streamlining the update process.

After the update process completes, it’s a good idea to reboot your system to ensure all changes take effect:

sudo reboot

Step 2: Install Development Tools

OpenSSL requires certain development tools and libraries to compile and install correctly. AlmaLinux 9 provides a convenient way to install these tools through the “Development Tools” package group. To install this group, run the following command:

sudo dnf group install "Development Tools" -y

This command installs a set of development-related tools, including compilers, debuggers, and other utilities that are essential for building software from source.

Additionally, we’ll need to install some specific dependencies for OpenSSL:

sudo dnf install perl-core zlib-devel -y

These packages provide necessary Perl modules and compression libraries that OpenSSL depends on.

Step 3: Remove Old OpenSSL Installation (if necessary)

If you have an older version of OpenSSL installed on your system, it’s generally a good idea to remove it before installing a new version. This helps prevent conflicts and ensures a clean installation. To check if OpenSSL is already installed and its version, use the following command:

openssl version

If OpenSSL is installed, you’ll see output similar to this:

OpenSSL 1.1.1k  FIPS 25 Mar 2021

To remove the existing OpenSSL installation, you can use the following command:

sudo dnf remove openssl openssl-devel -y

However, be cautious when removing OpenSSL, as many system components depend on it. If you’re unsure, it’s often safer to leave the system version in place and install the new version in a separate location, which we’ll cover in the following steps.

Step 4: Download OpenSSL

Now that we have our system prepared, let’s download the latest version of OpenSSL. At the time of writing, the latest stable version is 3.3.2, but you should check the official OpenSSL website for the most recent version.

To download OpenSSL, use the following commands:

cd /usr/local/src
sudo wget https://github.com/openssl/openssl/releases/download/openssl-3.3.2/openssl-3.3.2.tar.gz
sudo tar -zxf openssl-3.3.2.tar.gz

These commands change to the /usr/local/src directory, download the OpenSSL source code, and extract it. The tar command with the -zxf options extracts the compressed archive while preserving the file structure.

After extraction, change into the newly created directory:

cd openssl-3.3.2

Step 5: Install OpenSSL

Now that we have the source code, we can proceed with the installation. The installation process involves configuring the build, compiling the source code, and installing the compiled binaries.

First, let’s configure the build:

sudo ./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl shared zlib

This command configures OpenSSL with the following options:

• --prefix=/usr/local/ssl: Sets the installation directory
• --openssldir=/usr/local/ssl: Sets the directory for OpenSSL configuration files
• shared: Builds shared libraries in addition to static libraries
• zlib: Includes zlib compression support

Next, compile the source code:

sudo make

This process may take several minutes, depending on your system’s performance.

After compilation, it’s a good practice to run the OpenSSL test suite to ensure everything was built correctly:

sudo make test

If all tests pass, you can proceed with the installation:

sudo make install

This command installs OpenSSL in the directory specified during the configuration step (/usr/local/ssl).

To ensure that the new OpenSSL installation is recognized by the system, we need to update the shared library cache:

sudo ldconfig

Finally, to make the new OpenSSL binaries easily accessible, add them to your system’s PATH:

echo 'export PATH="/usr/local/ssl/bin:$PATH"' | sudo tee -a /etc/profile.d/openssl.sh
source /etc/profile.d/openssl.sh

These commands create a new shell script that adds the OpenSSL binary directory to the PATH, and then immediately applies this change to your current session.

Step 6: Verify the Installation

To ensure that OpenSSL has been installed correctly and is accessible, run the following command:

openssl version

You should see output similar to:

OpenSSL 3.3.2 19 Sep 2024 (Library: OpenSSL 3.3.2 19 Sep 2024)

This confirms that the newly installed version of OpenSSL is now the default on your system.

To verify that the installation is complete and functioning correctly, you can run a simple OpenSSL command:

openssl rand -base64 12

This command generates a random 12-byte string encoded in base64. If it executes without errors, your OpenSSL installation is working properly.

Troubleshooting Common Issues

While installing OpenSSL on AlmaLinux 9 is generally straightforward, you might encounter some issues. Here are some common problems and their solutions:

1. Missing Dependencies

If you encounter errors about missing libraries or headers during the configuration or compilation steps, you may need to install additional dependencies. Try installing the following packages:

sudo dnf install gcc gcc-c++ make openssl-devel -y

2. Permission Denied Errors

If you see “Permission denied” errors, ensure you’re using sudo for commands that require root privileges. If the issue persists, check the permissions of the directories you’re working in:

ls -l /usr/local/src

3. OpenSSL Command Not Found

If the ‘openssl’ command is not found after installation, ensure that you’ve added the new OpenSSL binary directory to your PATH as described in Step 5. You may need to log out and log back in for the changes to take effect.

4. Conflicts with Existing OpenSSL Installation

If you’re experiencing conflicts with an existing OpenSSL installation, consider installing the new version in a different location (e.g., /opt/openssl) and updating your PATH accordingly.

5. Build Failures

If the build process fails, check the error messages carefully. Often, they will point to specific missing dependencies or configuration issues. You can also consult the OpenSSL installation documentation or community forums for more specific troubleshooting advice.

Congratulations! You have successfully installed OpenSSL. Thanks for using this tutorial for installing the OpenSSL on AlmaLinux 9 system. For additional help or useful information, we recommend you check the OpenSSL website.