著者: Mike Tubby 日付: To: dng 題目: [DNG] Install OpenSSL (libssl, libcrypto) with weak ciphers
Hi All,
I appear to have a problem with OpenSSL and lack of support for weak
ciphers, i.e. DES and 3DES ...
I am trying to migrate a legacy system from Ubuntu 16.04 to Devuan 3.0
where we have mobile IoT devices based on Cinterion TC65i that are 10+
years old with a limited sub-set of SSL 3.0/TLS 1.0 ciphers in its
Java-ME runtime, in particular we need DES/3DESciphers like RSA-3DES-CBC-SHA
I have pulled the source package for openssl-1.1.1d and recompiled with
configure option --enable-weak-ssl-ciphers that has left we with a new
libssl and a mixture of .deb files and .udeb files:
root@webmin1:/home/chris/openssl# ls -l
total 20364
-rw-r--r-- 1 chris chris 1092008 Jul 21 13:41
libcrypto1.1-udeb_1.1.1d-0+deb10u6_amd64.udeb
-rw-r--r-- 1 chris chris 1539476 Jul 21 13:41
libssl1.1_1.1.1d-0+deb10u6_amd64.deb
-rw-r--r-- 1 chris chris 4024572 Jul 21 13:41
libssl1.1-dbgsym_1.1.1d-0+deb10u6_amd64.deb
-rw-r--r-- 1 chris chris 191008 Jul 21 13:41
libssl1.1-udeb_1.1.1d-0+deb10u6_amd64.udeb
-rw-r--r-- 1 chris chris 1794312 Jul 21 13:41
libssl-dev_1.1.1d-0+deb10u6_amd64.deb
-rw-r--r-- 1 chris chris 1722936 Jul 21 13:41
libssl-doc_1.1.1d-0+deb10u6_all.deb
drwxr-xr-x 22 chris chris 4096 Jul 21 13:49 openssl-1.1.1d
-rw-r--r-- 1 chris chris 6574 Jul 21 13:41
openssl_1.1.1d-0+deb10u6_amd64.buildinfo
-rw-r--r-- 1 chris chris 3724 Jul 21 13:41
openssl_1.1.1d-0+deb10u6_amd64.changes
-rw-r--r-- 1 chris chris 844036 Jul 21 13:41
openssl_1.1.1d-0+deb10u6_amd64.deb
-rw-r--r-- 1 root root 99740 Mar 23 20:54
openssl_1.1.1d-0+deb10u6.debian.tar.xz
-rw-r--r-- 1 root root 2472 Mar 23 20:54 openssl_1.1.1d-0+deb10u6.dsc
drwxr-xr-x 20 root root 4096 Jul 21 11:51 openssl-1.1.1d.orig
-rw-r--r-- 1 root root 8845861 Sep 14 2019 openssl_1.1.1d.orig.tar.gz
-rw-r--r-- 1 root root 488 Sep 14 2019
openssl_1.1.1d.orig.tar.gz.asc
-rw-r--r-- 1 chris chris 650980 Jul 21 13:41
openssl-dbgsym_1.1.1d-0+deb10u6_amd64.deb
root@webmin1:/home/chris/openssl#
I don't appear to get a new libcrypto1.1-udeb_1.1.1d-0+deb10u6_amd64.deb
but a udeb file instead that will not install.