Skip to main content

On ubuntu 22,04: Upgraded openssl from 3.0.2 to 3.0.7. openssl version command still shows 3.0.2 for library. How can I correct this?

I have just manually upgraded OpenSSL from 3.0.2 to 3.0.7. I know a patch was available for 3.0.2, but, easier to answer to management this way vs. having to explain over and over again why the version still shows 3.0.2. So no need to comment on that.

I ran into 'unable to lookup symbol BIO_f_zlib' initially after the install when using:

config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl share zlib.

Changed the config to: config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl no-comp and this was successful.

Now that my install is complete I am seeing that the openssl version command is showing: OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)

How do I correct my installation so that the Library version matches the Binary version?
NOTE:

  • I updated /etc/ld.so.conf.d with a file named openssl-3.0.7.conf with /usr/local/ssl/lib for contents.
  • I have also changed the system environment PATH var to include /usr/local/ssl/bin.
  • I executed ldconfig -v and source /etc/environment after the updates (no joy) and finally rebooted (still no joy).

Still seeing the mismatch in the openssl version output.

What have I missed and how can I make sure processes using the library are using the correct version library?

UPDATE: Tried suggestion to re-link libssl.so.3 with no success. See below environmental info and trailing openssl version output... New openssl (3.0.7) was installed to /usr/local/ssl per the config option on the build.

# lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 22.04.1 LTS Release: 22.04 Codename: jammy # find /usr/local -name 'libssl.so*' /usr/local/qualys/cloud-agent/lib/libssl.so.1.1 /usr/local/qualys/cloud-agent/lib/libssl.so **/usr/local/ssl/lib64/libssl.so.3 /usr/local/ssl/lib64/libssl.so /usr/local/lib64/libssl.so** /usr/local/lib64/libssl.so.3_3.0.2 <== renamed from libssl.so.3 /usr/local/src/openssl-3.0.7/libssl.so.3 /usr/local/src/openssl-3.0.7/libssl.so # ls -l **/usr/local/lib64**/libssl.so* lrwxrwxrwx 1 root root 32 Nov 2 17:07 /usr/local/lib64/libssl.so -> **/usr/local/ssl/lib64**/libssl.so.3 -rwxr-xr-x 1 root root 809464 Nov 1 15:55 /usr/local/lib64/libssl.so.3_3.0.2 # ls -l **/usr/local/ssl/lib64**/libssl.so* lrwxrwxrwx 1 root root 11 Nov 1 21:23 /usr/local/ssl/lib64/libssl.so -> libssl.so.3 -rwxr-xr-x 1 root root 808704 Nov 1 21:23 /usr/local/ssl/lib64/libssl.so.3 # openssl version -a **OpenSSL 3.0.7** 1 Nov 2022 (**Library: OpenSSL 3.0.2** 15 Mar 2022) built on: Thu Oct 27 17:06:56 2022 UTC platform: debian-amd64 options: bn(64,64) compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-WsPfAX/openssl-3.0.2=. -flto=auto -ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_TLS_SECURITY_LEVEL=2 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2 OPENSSLDIR: "/usr/lib/ssl" ENGINESDIR: "/usr/lib/x86_64-linux-gnu/engines-3" MODULESDIR: "/usr/lib/x86_64-linux-gnu/ossl-modules" Seeding source: os-specific CPUINFO: OPENSSL_ia32cap=0xfefa32035f8bffff:0x1c2ffb 

Thanks in advance