Installing libssl1.0.0 and openssl 1.0 in debian 6

[venkat_330]

I am newbie to opensll.
we are trying to connect to our server where its configuration requires TLS1.1 protocol for connection. Debian 6 repos does not have direct backportds for libssl1.0.0 & Openssl.

Need some guidance in updating Libssl and opensll version from source.
*hope compiling and updating these libraries from source is possible.

[stevepusser]

These packages were backported from Wheezy to a Squeeze base a while ago: http://us1.mepis-deb.org/mepiscr/testre ... o/openssl/

Though I am now going to backport the latest Wheezy update version right now to apply any security fixes.

[venkat_330]

This means that i just need to download and install via dpkg in my debian 6...Bcz all the package points deb7 in its name...

[stevepusser]

This means that i just need to download and install via dpkg in my debian 6...Bcz all the package points deb7 in its name...

They have deb7 in the name because I backported them from the wheezy-updates deb7 version at the time, but that has no bearing as to whether they are Debian 6 compatible (they are). I like to leave the source version in the name to make it easier to recognize backports. I went through the packaging and disabled the multiarch stuff, which does not work on Squeeze. Also don't install all the packages, not the udeb, dbg, doc, and probably not the -dev package unless you do compiling on that platform.

Hang on a bit and I'll have the current Wheezy update 17 finished.

[stevepusser]

OK, here's the current Wheezy version backported to a Squeeze base, this all the security fixes included:

https://copy.com/J2xUTyLKDK8NNT7T

[venkat_330]

Thanks steve

It was very timely.. Before running this would like to get some clarification.

On the production machine i would use below package to make my application work with TLS1.1

libssl1.0.0_1.0.1e-2+deb7u18mcr110+1_i386.deb
openssl_1.0.1e-2+deb7u18mcr110+1_i386.deb

Confused:
Should I use LIBCRYPTO..WHat are the case that is needed for
libcrypto1.0.0-udeb_1.0.1e-2+deb7u18mcr110+1_i386.udeb

In my devlopment would the same production + dev package to build my (Headers stuff)
libssl-dev_1.0.1e-2+deb7u18mcr110+1_i386.deb

Thanks
Venkat.S

[stevepusser]

udeb packages are only used in special cases, such as for the debian installer, and should not be used on a normal system. The crypto libraries are included in the standard libssl packages.

You are right about the headers being in the -dev package. You'll need them to compile anything that uses that system libssl library.

The openssl package has some programs that will perform cryptographic functions. They in turn use the libssl shared library to perform those.

This package contains the openssl binary and related tools.
.
It is part of the OpenSSL implementation of SSL.

You need it to perform certain cryptographic actions like:
- Creation of RSA, DH and DSA key parameters;
- Creation of X.509 certificates, CSRs and CRLs;
- Calculation of message digests;
- Encryption and decryption with ciphers;
- SSL/TLS client and server tests;
- Handling of S/MIME signed or encrypted mail.

[venkat_330]

Installed dev package and libraryin the system:

-rwxrwx--- 1 root root 1106442 Jul 2 23:37 libssl-dev_1.0.1e-2+deb7u18mcr110+1_i386.deb
-rwxrwx--- 1 root root 245344 Jul 2 23:37 libssl1.0.0_1.0.1e-2+deb7u18mcr110+1_i386.deb
-rwxrwx--- 1 root root 659380 Jul 2 23:37 openssl_1.0.1e-2+deb7u18mcr110+1_i386.deb

When i try to compile my application it throws error::

(.text+0x2b7): undefined reference to `RAND_bytes'
/usr/lib/gcc/i486-linux-gnu/4.4.5/../../../../lib/libssl.a(d1_enc.o): In function `dtls1_enc':
(.text+0x2e0): undefined reference to `OpenSSLDie'
/usr/lib/gcc/i486-linux-gnu/4.4.5/../../../../lib/libssl.a(d1_enc.o): In function `dtls1_enc':
(.text+0x2fa): undefined reference to `EVP_MD_CTX_md'
/usr/lib/gcc/i486-linux-gnu/4.4.5/../../../../lib/libssl.a(d1_enc.o): In function `dtls1_enc':
(.text+0x302): undefined reference to `EVP_MD_size'
/usr/lib/gcc/i486-linux-gnu/4.4.5/../../../../lib/libssl.a(d1_enc.o): In function `dtls1_enc':
(.text+0x334): undefined reference to `EVP_Cipher'
collect2: ld returned 1 exit status

[lightsurge]

OK, here's the current Wheezy version backported to a Squeeze base, this all the security fixes included:

https://copy.com/J2xUTyLKDK8NNT7T

I'm interested in this too. Any possibility you could provide a new link? I don't see these in the mepis test repository and the above link is broken.