This is an old revision of the document!

Process to update OpenSSL in base

1. Move current version of OpenSSL

$ mv /usr/src/crypto/openssl /usr/src/crypto/openssl-1.0.2

2. Download, verify

$ fetch https://www.openssl.org/source/openssl-1.1.0h.tar.gz
openssl-1.1.0h.tar.gz                         100% of 5295 kB   28 MBps 00m00s
$ fetch https://www.openssl.org/source/openssl-1.1.0h.tar.gz.asc
openssl-1.1.0h.tar.gz.asc                     100% of  455  B 4490 kBps 00m00s
$ sha256 ~/openssl-1.1.0h.tar.gz
SHA256 (/root/openssl-1.1.0h.tar.gz) = 5835626cde9e99656585fc7aaa2302a73a7e1340bf8c14fd635a62c66802a517
$ grep 5835626cde9e99656585fc7aaa2302a73a7e1340bf8c14fd635a62c66802a517 /usr/ports/security/openssl-devel/*
/usr/ports/security/openssl-devel/distinfo:SHA256 (openssl-1.1.0h.tar.gz) = 5835626cde9e99656585fc7aaa2302a73a7e1340bf8c14fd635a62c66802a517
$ gpg --verify openssl-1.1.0h.tar.gz.asc openssl-1.1.0h.tar.gz
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/documentation/faqs.html for more information
gpg: Signature made Tue Mar 27 15:50:44 2018 CEST using RSA key ID 0E604491
gpg: Good signature from "Matt Caswell <matt@openssl.org>"
gpg:                 aka "Matt Caswell <frodo@baggins.org>"
Primary key fingerprint: 8657 ABB2 60F0 56B1 E519  0839 D9C4 D26D 0E60 4491

3. Unpack, remove version from directory

$ tar xf ~/openssl-1.1.0h.tar.gz -C /usr/src/crypto
$ mv /usr/src/crypto/openssl-1.1.0h /usr/src/crypto/openssl

4. Update /usr/src/secure/lib/libcrypto/Makefile.inc

...
# OpenSSL version used for manual page generation
OPENSSL_VER=    1.1.0h
OPENSSL_DATE=   2018-03-27
...

5. Required tools: Perl We need pod2man from perl and perl to generate assembly from the perl scripts

$ pkg install perl5
...