Philip Smith's Internet Development Site

User Tools

Site Tools

Trace: • rpki
hints:rpki

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
hints:rpki [2026/03/13 05:47] – [RPKI-client] philiphints:rpki [2026/03/13 05:52] (current) – [Initial Preparation] philip
Line 204: Line 204:
 The other required package noted in the instructions is **tls** from LibreSSL. LibreSSL is a branch of OpenSSL and is used on OpenBSD - not found on Linux, but seems to be appearing in the latest Debian/Ubuntu beta builds. So we need to download the bits we need and install. The **rpki-client** instructions don't say anything about how to do that. The other required package noted in the instructions is **tls** from LibreSSL. LibreSSL is a branch of OpenSSL and is used on OpenBSD - not found on Linux, but seems to be appearing in the latest Debian/Ubuntu beta builds. So we need to download the bits we need and install. The **rpki-client** instructions don't say anything about how to do that.
  
-First we go to [[https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/|https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/]] and select the latest package, which is libressl-3.9.2.tar.gz at time of writing+First we go to [[https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/|https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/]] and select the latest package, which is libressl-4.2.1.tar.gz at time of writing
 <code> <code>
-wget https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.9.2.tar.gz+wget https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.2.1.tar.gz
 </code> </code>
 We then unpack it: We then unpack it:
 <code> <code>
-tar zxf libressl-3.9.2.tar.gz+tar zxf libressl-4.2.1.tar.gz
 </code> </code>
 and then build it: and then build it:
 <code> <code>
-cd libressl-3.9.2+cd libressl-4.2.1
 ./configure --enable-libtls-only ./configure --enable-libtls-only
 make make
Line 221: Line 221:
 Note the option to only build **libtls** - we don't need the rest of LibreSSL and it could well interfere with OpenSSL which will already be on the system. Now that **libtls** is built, the **install** action will put the libraries in **/usr/local/lib** like this: Note the option to only build **libtls** - we don't need the rest of LibreSSL and it could well interfere with OpenSSL which will already be on the system. Now that **libtls** is built, the **install** action will put the libraries in **/usr/local/lib** like this:
 <code> <code>
--rw-r--r-- 1 root root 18679208 Jul 14 10:11 libtls.a +-rw-r--r--  1 root root 19405326 Mar 13 05:52 libtls.a 
--rw-r--r-- 1 root root      923 Jul 14 10:11 libtls.la +-rw-r--r--  1 root root      923 Mar 13 05:52 libtls.la 
-lrwxrwxrwx 1 root root       16 Jul 14 10:11 libtls.so -> libtls.so.29.0.0 +lrwxrwxrwx  1 root root       16 Mar 13 05:52 libtls.so -> libtls.so.33.0.1 
-lrwxrwxrwx 1 root root       16 Jul 14 10:11 libtls.so.29 -> libtls.so.29.0.0 +lrwxrwxrwx  1 root root       16 Mar 13 05:52 libtls.so.33 -> libtls.so.33.0.1 
--rw-r--r-- 1 root root  8721528 Jul 14 10:11 libtls.so.29.0.0+-rw-r--r--  1 root root  9119592 Mar 13 05:52 libtls.so.33.0.1
 </code> </code>
 Run **sudo ldconfig** so that the system knows about the new libraries. Run **sudo ldconfig** so that the system knows about the new libraries.
hints/rpki.1773380821.txt.gz · Last modified: by philip