Sign up ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

We are concerned with the OpenSSL vulnerabilities and are running a SLES11SP1 server. unfortunately, due to admin reasons, our support expired, and so we are looking at manually upgdating OpenSSL and its required libraries manually. Is there a script, or recommended way to get the latest version of OpenSSL and make either an RPM or install the modules directly on the OS ?

share|improve this question

2 Answers 2

zypper up as root from a terminal should do the trick.

share|improve this answer
Does not work, as the support is expired and SUSE is no more providing updates for the version we are using. I am looking for an alternate way to install OpenSSL, one where I can just install the right RPM files and get everything updated for OpenSSL and its dependencies. –  jfmessier Jun 12 '14 at 1:28
You can either compile from source or create your own RPMs. Here's the latest source : . Instructions here : . –  schaiba Jun 13 '14 at 13:18

It is not possible without updating most of the system. I tried the same with a CentOS 5.x and ended up wasting a lot of time.

What you could do (tried this, too, but ended up upgrading the whole system instead) is to install the sources of OpenSSL and your web server etc. -- whatever you wish to run with your new SSL, then compile these with a different compile root, e.g. in /opt. It will, however, not be easy (to say the least) to compile OpenSSL against your old system libraries - I had that problem anyway.

A remaining problem will be that no easy upgrade route is available when a newer version of OpenSSL is released.

One workaround (wildly brainstorming now) could be to run a virtual machine with a newer system, running your SSL-based services, if there is no way of upgrading the (guest) OS.

Another workaroud would be to compile these services (like apache) against a static build of openSSL (which you would need to compile) - again lots of work.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.