centos7编译安装git出错--openssl

一、异常信息
安装步骤是这样的：
1、下载git-2.11.0.tar.gz 到 /usr/local/src

[root@tCentos7 ~]# cd /usr/local/src
[root@tCentos7 ~]# wget https://www.kernel.org/pub/software/scm/git/git-2.11.1.tar.gz

2、安装依赖的库

[root@tCentos7 ~]#yum groupinstall "Development Tools"
[root@tCentos7 ~]# yum install curl-devel expat-devel gettext-devel openssl-devel zlib-devel perl-CPAN perl-devel perl-ExtUtils-Embed

3、 删除原本的安装的git

[root@tCentos7 ~]# yum remove git -y

4、编译安装

[root@tCentos7 ~]# cd /usr/local/src
[root@tCentos7 ~]# tar -zvxf git-2.11.1.tar.gz
[root@tCentos7 ~]# cd git-2.11.1
[root@tCentos7 ~]# ./configure
[root@tCentos7 ~]# make
[root@tCentos7 ~]# make install

在make这一步出错，错误代码：

imap-send.o: In function `sk_GENERAL_NAME_num':
/usr/local/include/openssl/x509v3.h:165: undefined reference to `OPENSSL_sk_num'
imap-send.o: In function `sk_GENERAL_NAME_value':
/usr/local/include/openssl/x509v3.h:165: undefined reference to `OPENSSL_sk_value'
imap-send.o: In function `sk_GENERAL_NAME_pop_free':
/usr/local/include/openssl/x509v3.h:165: undefined reference to `OPENSSL_sk_pop_free'
/usr/local/include/openssl/x509v3.h:165: undefined reference to `OPENSSL_sk_pop_free'
imap-send.o: In function `ssl_socket_connect':
/usr/local/src/git-2.11.1/imap-send.c:287: undefined reference to `OPENSSL_init_ssl'
/usr/local/src/git-2.11.1/imap-send.c:288: undefined reference to `OPENSSL_init_ssl'
/usr/local/src/git-2.11.1/imap-send.c:290: undefined reference to `TLS_method'
/usr/local/src/git-2.11.1/imap-send.c:303: undefined reference to `SSL_CTX_set_options'
collect2: error: ld returned 1 exit status
make: *** [git-imap-send] Error 1

好像跟OPENSSL有关，我升级了openssl，自带的是OpenSSL 1.0.1e-fips 11 Feb 2013，我把它升级到了openssl-1.1.0d
二、解决步骤
1、在终端使用wget下载最新没有漏洞的版本

wget https://www.openssl.org/source/openssl-1.1.0f.tar.gz

2、执行编译

cd openssl-1.1.0f/
./config  --prefix=/usr/local/related/openssl --openssldir=/usr/local/related/openssl/ssl
make && make install
./config shared --prefix=/usr/local/related/openssl --openssldir=/usr/local/related/openssl/ssl
make clean
make && make install

3、配置
备份原来的openssl命令

mv /usr/bin/openssl /usr/bin/openssl.bak

备份原来的openssl目录 (一些环境下本地include下面没有旧的openssl目录,这里我的环境是liunx7,centos6.8)

mv /usr/include/openssl  /usr/include/openssl.bak

将安装好的openssl 的openssl命令软连到/usr/bin/openssl

ln -s /usr/local/related/openssl/bin/openssl /usr/bin/openssl

将安装好的openssl 的openssl目录软连到/usr/include/openssl

ln -s /usr/local/related/openssl/include/openssl /usr/include/openssl

修改系统自带的openssl库文件，如/usr/local/lib64/libssl.so(根据机器环境而定) 软链到升级后的libssl.so

ln -s /usr/local/related/openssl/lib/libssl.so.1.1 /usr/local/lib64/libssl.so

----注意时usr/local下的lib64不是/usr/lib64，两个目录下又同名目录

在/etc/ld.so.conf文件中写入openssl库文件的搜索路径

echo "/usr/local/related/openssl/lib" >> /etc/ld.so.conf

使修改后的/etc/ld.so.conf生效

ldconfig -v

最好查看下openssl版本号，看是否已经更新成最新的，

openssl version -a

3,

使用

头文件目录:

/usr/local/related/openssl/include  

gcc编译的时候加-lssl，同时指定libssl.so。

其他：
1、openssl官网：https://www.openssl.org/source/