【GmSSL】GmSSL 与 OpenSSL 共存的安装方法

灰太狼 2022-10-26 14:14 771阅读 0赞

## 安装openssl ##

使用yum或者apt命令都可以安装，现在最新的系统自带的就是openssl1.1.1g

## 安装 GmSSL ##

关键点就是no-shared：只编译静态库

**下载解压**

# 下载 gmssl
    wget https://github.com/guanzhi/GmSSL/archive/master.zip
    # 解压
    unzip master.zip

**编译**

![复制代码][48304ba5e6f9fe08f3fa1abda7d326ab.png]

cd GmSSL-master
    
    # --prefix 指定 gmssl 的安装路径
    # --openssldir 表示 OpenSSL 数据区域，例如openssl.cnf，证书和密钥. 如果是相对目录，它将被添加到--prefix给定的目录中。【可以不指定，默认在 --prefix 同级目录的 ssl 目录】
    # no-shared 表示只编译静态库，不编译动态库
    #
    # 官方解释
    #
    # --prefix      prefix for the OpenSSL installation, which includes the
    #               directories bin, lib, include, share/man, share/doc/openssl
    #               This becomes the value of INSTALLTOP in Makefile
    #               (Default: /usr/local)
    # --openssldir  OpenSSL data area, such as openssl.cnf, certificates and keys.
    #               If it's a relative directory, it will be added on the directory
    #               given with --prefix.
    #               This becomes the value of OPENSSLDIR in Makefile and in C.
    #               (Default: PREFIX/ssl)
    # [no-]shared    [don't] try to create shared libraries when supported.

> ./config --prefix=/usr/local/gmssl no-shared

**安装**

make
    # 安装（如果有旧版本，可以使用 make uninstall 卸载，然后删除对应文件）
    make install

**添加环境变量**

# 添加环境变量
    echo 'export PATH="$PATH:/usr/local/gmssl/bin"' >> ~/.bash_profile
    source ~/.bash_profile

**查看版本信息（openssl 与 gmssl共存）**

![a5aed9739d058a03de2f3776cb0bd8ae.png][]

>  ./config --prefix=/usr/local/gmssl no-shared no-sdf  
> Operating system: x86\_64-whatever-linux2  
> Configuring for linux-x86\_64  
> Configuring GmSSL version 2.5.4 (0x1010004fL)  
>     no-asan         \[default\]  OPENSSL\_NO\_ASAN  
>     no-crypto-mdebug \[default\]  OPENSSL\_NO\_CRYPTO\_MDEBUG  
>     no-crypto-mdebug-backtrace \[default\]  OPENSSL\_NO\_CRYPTO\_MDEBUG\_BACKTRACE  
>     no-dynamic-engine \[forced\]    
>     no-ec\_nistp\_64\_gcc\_128 \[default\]  OPENSSL\_NO\_EC\_NISTP\_64\_GCC\_128  
>     no-egd          \[default\]  OPENSSL\_NO\_EGD  
>     no-fuzz-afl     \[default\]  OPENSSL\_NO\_FUZZ\_AFL  
>     no-fuzz-libfuzzer \[default\]  OPENSSL\_NO\_FUZZ\_LIBFUZZER  
>     no-gmieng       \[default\]  OPENSSL\_NO\_GMIENG  
>     no-heartbeats   \[default\]  OPENSSL\_NO\_HEARTBEATS  
>     no-md2          \[default\]  OPENSSL\_NO\_MD2 (skip dir)  
>     no-msan         \[default\]  OPENSSL\_NO\_MSAN  
>     no-rc5          \[default\]  OPENSSL\_NO\_RC5 (skip dir)  
>     no-sctp         \[default\]  OPENSSL\_NO\_SCTP  
>     **no-sdf          \[option\]   OPENSSL\_NO\_SDF (skip dir)**  
>     no-sdfeng       \[default\]  OPENSSL\_NO\_SDFENG  
>     **no-shared       \[option\]  **  
>     no-skfeng       \[default\]  OPENSSL\_NO\_SKFENG  
>     no-ssl-trace    \[default\]  OPENSSL\_NO\_SSL\_TRACE  
>     no-ssl3         \[default\]  OPENSSL\_NO\_SSL3  
>     no-ssl3-method  \[default\]  OPENSSL\_NO\_SSL3\_METHOD  
>     no-ubsan        \[default\]  OPENSSL\_NO\_UBSAN  
>     no-unit-test    \[default\]  OPENSSL\_NO\_UNIT\_TEST  
>     no-weak-ssl-ciphers \[default\]  OPENSSL\_NO\_WEAK\_SSL\_CIPHERS  
>     no-zlib         \[default\]   
>     no-zlib-dynamic \[default\]   
> Configuring for linux-x86\_64  
> CC            =gcc  
> CFLAG         =-Wall -O3 -pthread -m64 -DL\_ENDIAN  -Wa,--noexecstack  
> SHARED\_CFLAG  =-fPIC -DOPENSSL\_USE\_NODELETE  
> DEFINES       =DSO\_DLFCN HAVE\_DLFCN\_H NDEBUG OPENSSL\_THREADS OPENSSL\_NO\_DYNAMIC\_ENGINE OPENSSL\_PIC OPENSSL\_IA32\_SSE2 OPENSSL\_BN\_ASM\_MONT OPENSSL\_BN\_ASM\_MONT5 OPENSSL\_BN\_ASM\_GF2m SHA1\_ASM SHA256\_ASM SHA512\_ASM RC4\_ASM MD5\_ASM AES\_ASM VPAES\_ASM BSAES\_ASM GHASH\_ASM ECP\_NISTZ256\_ASM PADLOCK\_ASM GMI\_ASM POLY1305\_ASM  
> LFLAG         =  
> PLIB\_LFLAG    =  
> EX\_LIBS       =-ldl   
> APPS\_OBJ      =  
> CPUID\_OBJ     =x86\_64cpuid.o  
> UPLINK\_OBJ    =  
> BN\_ASM        =asm/x86\_64-gcc.o x86\_64-mont.o x86\_64-mont5.o x86\_64-gf2m.o rsaz\_exp.o rsaz-x86\_64.o rsaz-avx2.o  
> EC\_ASM        =ecp\_nistz256.o ecp\_nistz256-x86\_64.o ecp\_sm2z256.o ecp\_sm2z256-x86\_64.o  
> DES\_ENC       =des\_enc.o fcrypt\_b.o  
> AES\_ENC       =aes-x86\_64.o vpaes-x86\_64.o bsaes-x86\_64.o aesni-x86\_64.o aesni-sha1-x86\_64.o aesni-sha256-x86\_64.o aesni-mb-x86\_64.o  
> BF\_ENC        =bf\_enc.o  
> CAST\_ENC      =c\_enc.o  
> RC4\_ENC       =rc4-x86\_64.o rc4-md5-x86\_64.o  
> RC5\_ENC       =rc5\_enc.o  
> MD5\_OBJ\_ASM   =md5-x86\_64.o  
> SHA1\_OBJ\_ASM  =sha1-x86\_64.o sha256-x86\_64.o sha512-x86\_64.o sha1-mb-x86\_64.o sha256-mb-x86\_64.o  
> RMD160\_OBJ\_ASM=  
> CMLL\_ENC      =cmll-x86\_64.o cmll\_misc.o  
> MODES\_OBJ     =ghash-x86\_64.o aesni-gcm-x86\_64.o  
> PADLOCK\_OBJ   =e\_padlock-x86\_64.o  
> GMI\_OBJ       =e\_gmi-x86\_64.o  
> CHACHA\_ENC    =chacha-x86\_64.o  
> POLY1305\_OBJ  =poly1305-x86\_64.o  
> BLAKE2\_OBJ    =  
> PROCESSOR     =  
> RANLIB        =ranlib  
> ARFLAGS       =  
> PERL          =/usr/bin/perl
> 
> SIXTY\_FOUR\_BIT\_LONG mode
> 
> Configured for linux-x86\_64.  
>

[48304ba5e6f9fe08f3fa1abda7d326ab.png]: /images/20221024/9fad5403c9534bb9a752fa4a9de6d7e5.png
[a5aed9739d058a03de2f3776cb0bd8ae.png]: /images/20221024/1f274c337b464fa892c7c96535d9c01c.png