Install openssl mac os catalina

Installing OpenSSL library on macOS Catalina

Yaşar Yücel Yeşilbağ

Sep 18, 2020 · 4 min read

Whether you are building apps for just macOS or for cross-platform, if your app is using OpenSSL for crypto-works, you will have to install OpenSSL library since macOS ships with LibreSSL. Furthermore, cross-platform cryptography in .Net Core and .Net 5 uses OpenSSL on macOS.

Installing OpenSSL library on macOS seems easy at first, but in practice can be a real pain in the back. Here is my journey of installing OpenSSL 1.1.1g on macOS Catalina (10.15.6) and making it reachable by my .Net Core apps. I tried to write complete and generalized instructions to be as applicable to more systems as possible. And I also avoided symbolic linking (ln -s) and install_name_tool, since for me those are last options.

Installing OpenSSL

First, open a terminal, and see if OpenSSL is already installed:

If it’s not installed, you’ll see “Not installed” among the first few lines of output. Or may be it’s not the latest version. So, install or update if necessary:

Check if the system sees the library directly:

This command prints the SSL library which exists first in the PATH environment variable, being LibreSSL or OpenSSL at some version. OpenSSL doesn’t need being here to be reachable. But if you want this for some reason, follow the instructions below, otherwise jump to the Making OpenSSL Reachable section.

Run the command “brew info openssl” again:

Since OpenSSL is keg-only [1], it has to be referred from an environment variable, which is done by the printed instruction, which is the echo ‘export… line in the red rectangle at above screenshot. It may be a bit different in your system, it’s because it depends on its version. Copy/paste/run that line, so that necessary command will be written to .profile file [2].

To see what is written to .profile file, if you wonder, run below command at home directory:

Manually run the .profile file to eliminate logoff & logon at this time:

Check if system sees it now:

It should now print the up-to-date OpenSSL.

Making OpenSSL Reachable

When an app wants to use a library, macOS searches several locations to find it. We have to find library path of OpenSSL and add it to DYLD_LIBRARY_PATH environment variable. For this purpose, run “brew info openssl” command again.

The path in the red rectangle at above screenshot is the path where OpenSSL is installed. To have the library path we’re looking for, just append /lib to it. We want this library path to be added to aforementioned environment variable at every user logon. And we’ll use below command for this, just replace the …/lib path with the one you have.

Manually run the .profile file [2] to eliminate logoff & logon at this time:

This should do the trick normally. But I’ve read that on some systems apps still cannot find OpenSSL library. So, try running your OpenSSL app. If the app gives an error like “No usable version of libssl was found. Abort trap: 6” or “PlatformNotSupportedException”, you may have to install or update libssh2. I didn’t need it but here it is:

Since libssh2 is not keg-only [1], it will be readily accessible without adding it to any environment variable.

That’s it! Now OpenSSL library should be reachable from any app. At least that’s the common hope 😊 This was not the funniest thing I did so far, but it was necessary. And I wrote it down here to be a reference for everyone.

I wish you installations funnier than this one 😁 Now I need some beer 🍺

Note [1]: For a software via brew to be “keg-only” means it is installed in /usr/local/Cellar but not linked into places like /usr/local/bin, /usr/local/lib. This means most tools will not find it.

Источник

buraksahin59 / enable-ssl-on-localhost.md

STEP 1: Enable SSL Module

It is often important to be able to test your local site setup under SSL (e.g. https://yoursite.com). There are a few steps that are needed to accomplish this with your Homebrew-based Apache setup. The first step is to make some modifications to your httpd.conf :

In this file you should uncomment both the socache_shmcb_module , ssl_module , and also the include for the httpd-ssl.conf by removing the leading # symbol on those lines:

Next we need to change the default 8443 port to the more standard 443 and comment out some sample code. So we need to open the SSL config file:

replace it with:

and replace the 8443 references with 443 and note the commenting:

STEP 2: Generate Certificates

Create a directory as named ssl within /usr/local/etc/httpd/ using Terminal.app:

To pass process from here till Step 3, you can use my script by following link https://gist.github.com/buraksahin59/91a98a04f05fd09addbe924cc2cd3de1

Next, generate server keys:

Create a configuration file using Terminal.app:

Edit the newly created configuration file and add the following:

Generate the required Certificate Requests using Terminal.app:

My example for Certificate Requests as following:

Note: Complete the values C= ST= L= O= CN= to reflect your own organizational structure, where:

• C= eq. Country: The two-letter ISO abbreviation for your country.
• ST= eq. State or Province: The state or province where your organization is legally located.
• L= eq. City or Locality: The city where your organization is legally located.
• O= eq. Organization: he exact legal name of your organization.
• CN= eq. Common Name: The fully qualified domain name for your web server

Use the Certificate Requests to sign the SSL Certificates using Terminal.app:

Add the SSL Certificate to Keychain Access.

Step 3: Apache Virtual Host Configuration

Edit the Virtual Hosts file /usr/local/etc/httpd/extra/httpd-vhosts.conf to add appropriate SSL based virtual hosts.

Here you can create a VirtualHost entry for each virtual host that you wish to provide SSL support for.

In this example we have created the VirtualHost for yoursite.local , but it could be any of your existing or even a new VirtualHost. The important parts are the the 443 port, along with SSLEngine on and the SSLCertificateFile and SSLCertificateKeyFile entries that point to the certificate we now need to generate.

Then all you need to do now is double check your Apache configuration syntax:

If all goes well, restart Apache:

Open your browser and visit https://yoursite.local to verify your configuration.

Tip You can tail -f /usr/local/var/log/httpd/error_log, the Apache error log while you restart to see if you have any errors.

Источник

Question: Q: install openssl

Is there a step by step process to install latest version of openssl. I am using OS 10.8.5 on a Mac Mini, current version is OpenSSL 0.9.8y 5 Feb 2013.

This is not a server version.

Posted on Jun 19, 2014 7:32 AM

Thank you Illaass.

The Top Link had helped me. After getting it to install I did not have Path correctly. I was able to get to work on MacBook Pro but need to install xcode for make command on MacMini to try and repeat the process. Don’t know if there is an easier way to get command line tools though.

Posted on Jun 19, 2014 9:34 AM

Helpful answers

The Mac topic in:

Jun 19, 2014 8:12 AM

There are I believe three different ways to get the xcode command line tools installed.

1. Download and install the full XCode package either from the App store (free) or from the Apple Developer portal (requires developer account), then in XCode tell it to download and install the command line tools
2. Download only the command line tools installer from the Apple Developer portal (requires developer account)
3. Trigger an automated install in Terminal

I am not sure why you are installing a (newer) version of OpenSSL on a Mac. If this is with regards to the recent HeartBleed security problem then no Mac has ever had a version that is vulnerable to this issue. Ironically in this case it is precisely because the version Apple includes is out-of-date that it does not have this problem.

Источник

Openssl Mac

Related Searches

Listing Of Websites About openssl mac

Openssl For Mac

Openssl

Posted at: 1 day ago | Categories: Openssl | 131 People Used View Detail

Installing OpenSSL library on macOS Catalina | …

Openssl

Posted at: 1 week ago | Categories: Openssl | 363 People Used View Detail

Download OpenSSL for Mac | MacUpdate

Openssl

Posted at: 1 week ago | Categories: Openssl | 185 People Used View Detail

macos — How to install latest version of openssl …

Openssl

Posted at: 5 days ago | Categories: Openssl | 221 People Used View Detail

Installing OpenSSL on macOS — Franz

Openssl

Posted at: 1 day ago | Categories: Openssl | 118 People Used View Detail

OpenSSL

Openssl

Posted at: 2 days ago | Categories: Openssl | 102 People Used View Detail

Using the OpenSSL library with macOS

Openssl

Posted at: 6 days ago | Categories: Openssl | 232 People Used View Detail

Openssl For Mac

Openssl

Posted at: 1 week ago | Categories: Openssl | 307 People Used View Detail

Using OpenSSL to create keys for Mac OS X. · …

Openssl

Posted at: 1 week ago | Categories: Openssl | 339 People Used View Detail

install openssl — Apple Community

Openssl

Posted at: 1 week ago | Categories: Openssl | 388 People Used View Detail

Is OpenSSL installed on Mac by default? – IT-QA.COM

Openssl

Posted at: 1 day ago | Categories: Openssl | 302 People Used View Detail

Mac Dev Env: OpenSSL

Openssl

Posted at: 1 week ago | Categories: Openssl | 143 People Used View Detail

How do I update OpenSSL on Mac? – QuickAdviser

Openssl

Posted at: 1 week ago | Categories: Openssl | 302 People Used View Detail

How do I downgrade OpenSSL on Mac? – QuickAdviser

Openssl

Posted at: 5 days ago | Categories: Openssl | 498 People Used View Detail

security — How to upgrade OpenSSL in OS X? — Ask …

Openssl

Posted at: 2 days ago | Categories: Openssl | 236 People Used View Detail

Class: OpenSSL::CMAC — Documentation for openssl …

Openssl

Posted at: 5 days ago | Categories: Openssl | 249 People Used View Detail

openssl/obj_mac.h at master · openssl/openssl · GitHub

Openssl

Posted at: 1 week ago | Categories: Openssl | 359 People Used View Detail

Compilation and Installation — OpenSSL

Openssl

Posted at: 2 days ago | Categories: Openssl | 176 People Used View Detail

Installing PowerShell on macOS — PowerShell | …

Openssl

Posted at: 1 day ago | Categories: Openssl | 72 People Used View Detail

Build latest OpenSSL Universal Binary on OSX · GitHub

Openssl

Posted at: 6 days ago | Categories: Openssl | 285 People Used View Detail

Binaries — OpenSSL

Openssl

Posted at: 2 days ago | Categories: Openssl | 422 People Used View Detail

openssl for mac free download — SourceForge

Openssl

URL: https://sourceforge.net/directory/?q=openssl for mac Go now

Posted at: 4 days ago | Categories: Openssl | 335 People Used View Detail

Mac Catalyst and OpenSSL | Apple Developer Forums

Openssl

Posted at: 1 week ago | Categories: Openssl | 221 People Used View Detail

How to Compile Python with OpenSSL on Mac — Tony …

Openssl

Posted at: 3 days ago | Categories: Openssl | 144 People Used View Detail

Convert .pfx to .pem Certificates Using OpenSSL — …

Openssl

/Desktop/client_ssl.pfx The client_ssl.pem is the path to where you want it to save the converted .pem .

Posted at: 1 week ago | Categories: Openssl | 494 People Used View Detail

Related Searches

How can I install OpenSSL on my Mac?

Note that OpenSSL is officially available only as source, so you must manually compile and install the software on your Mac. To install the OpenSSL toolkit and library on your Mac, you must open the Terminal application, go to the OpenSSL source folder, and follow the instructions from the INSTALL file included in the archive.

Where is the openssl.cnf file on my Mac?

I am trying to locate the «openssl.cnf» file on my mac, and I haven’t found it in these locations: There is no «ssl» folder to begin with. When I type the command «openssl version» on the terminal, it gives me: OpenSSL 0.9.8za 5 so what could be the problem? On Sierra High Sierra Mojave, I have two copies of openssl.cnf with different contents:

Which is the latest version of OpenSSL for Mavericks?

This affects OpenSSL versions including 1.0.1f which is the version on my up-to-date Mavericks computer Mac (because I used port/brew to install other software which updated my openssl without me realizing it ): OpenSSL released a fix today in 1.0.1g and I wonder how I can get this fixed version installed over my current version?

Is there a symlink for OpenSSL in OS X?

As an alternative to that final step, some people replace the openssl in /usr/bin with a symlink to /usr/local/Cellar/openssl/1.0.1g/bin/openssl (or whatever your version is): But this is known to cause problems with some more recent versions of OSX.

Источник

aklap / fix-missing-libcrypto-osx.md

brew install openssl

ln -s /usr/local/opt/openssl/lib/libcrypto.1.0.0.dylib /usr/local/lib/

ln -s /usr/local/opt/openssl/lib/libssl.1.0.0.dylib /usr/local/lib/

This comment has been minimized.

Copy link Quote reply

lomse commented Nov 1, 2018

Very helpful in solving this issue Blizzard/node-rdkafka#373. Thanks for sharing

This comment has been minimized.

Copy link Quote reply

milapavlovic2018 commented Jan 15, 2019

Thank you, this solved the issue!

This comment has been minimized.

Copy link Quote reply

oxfn commented Jan 20, 2019

Unfortunately, this is not applicable for all cases that could occur. For example, symlinks to dynlibs are not enough for pkg-config to generate valid flags (I’ve faced this problem while trying to build go app). If we try to follow basic brew workflow and invoke brew link openssl it will explain, why it doesn’t do this by default 🕵️‍♂️ an kindly suggest couple of solutions:

Last option has worked well for me: PKG_CONFIG_PATH=»/usr/local/opt/openssl/lib/pkgconfig» make build

This comment has been minimized.

Copy link Quote reply

tostrowski commented Feb 25, 2019

This comment has been minimized.

Copy link Quote reply

stoicbuddha commented Mar 14, 2019

Last option has worked well for me: PKG_CONFIG_PATH=»/usr/local/opt/openssl/lib/pkgconfig» make build

@oxfn This worked like a charm! Thanks!

This comment has been minimized.

Copy link Quote reply

LaRiffle commented Apr 15, 2019

This comment has been minimized.

Copy link Quote reply

finiteinfinity commented Sep 23, 2019

Last option has worked well for me: PKG_CONFIG_PATH=»/usr/local/opt/openssl/lib/pkgconfig» make build

This comment has been minimized.

Copy link Quote reply

nepp-an commented Apr 17, 2020

Unfortunately, this is not applicable for all cases that could occur. For example, symlinks to dynlibs are not enough for pkg-config to generate valid flags (I’ve faced this problem while trying to build go app). If we try to follow basic brew workflow and invoke brew link openssl it will explain, why it doesn’t do this by default 🕵️‍♂️ an kindly suggest couple of solutions:

Last option has worked well for me: PKG_CONFIG_PATH=»/usr/local/opt/openssl/lib/pkgconfig» make build

thank you so much

This comment has been minimized.

Copy link Quote reply

mawansui commented May 5, 2020

Thank you so much for this!

This comment has been minimized.

Copy link Quote reply

jhammerstein commented May 6, 2020

Last option has worked well for me: PKG_CONFIG_PATH=»/usr/local/opt/openssl/lib/pkgconfig» make build

when I do this, I get

make: *** No rule to make target `build’. Stop.

overall its very weird, because when i try to install openssl, it tells me that it already exists. However, when I try to use it it cant find it. I would be very grateful for help!!

This comment has been minimized.

Copy link Quote reply

rlirli commented May 12, 2020 •

brew install openssl installs the newest 1.1 version of openSSL.
Therefore the linking commands with libcrypto version 1.0.0 proposed above would not work.

ln -s /usr/local/opt/openssl/lib/libcrypto.1.0.0.dylib /usr/local/lib/ should be
ln -s /usr/local/opt/openssl/lib/libcrypto.1.1.dylib /usr/local/lib/ . However, this did not work for my use case either.

What did work was downgrading to openSSL 1.0 using @igormelao’s code from this issue:

There are 2 uninstall commands to make sure any OpenSSL v1.1 is removed, and any dead v1.0 is removed, before installing v1.0.

This comment has been minimized.

Copy link Quote reply

vcjuliocesar commented May 18, 2020

hi,i have a problem, i need to install mongo in macos catalina,but it not work my code is this
sudo pecl install mongo
WARNING: «pecl/mongo» is deprecated in favor of «channel:///mongodb»
downloading mongo-1.6.16.tgz .
Starting to download mongo-1.6.16.tgz (210,341 bytes)
. done: 210,341 bytes
118 source files, building
running: phpize
Configuring for:
PHP Api Version: 20131106
Zend Module Api No: 20131226
Zend Extension Api No: 220131226
Build with Cyrus SASL (MongoDB Enterprise Authentication) support? [no] :
building in /private/tmp/pear/temp/pear-build-rootpBkTQl/mongo-1.6.16
running: /private/tmp/pear/temp/mongo/configure —with-php-config=/usr/local/opt/php@5.6/bin/php-config —with-mongo-sasl=no
checking for grep that handles long lines and -e. /usr/bin/grep
checking for egrep. /usr/bin/grep -E
checking for a sed that does not truncate output. /usr/bin/sed
checking for cc. cc
checking whether the C compiler works. yes
checking for C compiler default output file name. a.out
checking for suffix of executables.
checking whether we are cross compiling. no
checking for suffix of object files. o
checking whether we are using the GNU C compiler. yes
checking whether cc accepts -g. yes
checking for cc option to accept ISO C89. none needed
checking how to run the C preprocessor. cc -E
checking for icc. no
checking for suncc. no
checking whether cc understands -c and -o together. yes
checking for system library directory. lib
checking if compiler supports -R. no
checking if compiler supports -Wl,-rpath. yes
checking build system type. x86_64-apple-darwin19.4.0
checking host system type. x86_64-apple-darwin19.4.0
checking target system type. x86_64-apple-darwin19.4.0
checking for PHP prefix. /usr/local/Cellar/php@5.6/5.6.40
checking for PHP includes. -I/usr/local/Cellar/php@5.6/5.6.40/include/php -I/usr/local/Cellar/php@5.6/5.6.40/include/php/main -I/usr/local/Cellar/php@5.6/5.6.40/include/php/TSRM -I/usr/local/Cellar/php@5.6/5.6.40/include/php/Zend -I/usr/local/Cellar/php@5.6/5.6.40/include/php/ext -I/usr/local/Cellar/php@5.6/5.6.40/include/php/ext/date/lib
checking for PHP extension directory. /usr/local/Cellar/php@5.6/5.6.40/pecl/20131226
checking for PHP installed headers prefix. /usr/local/Cellar/php@5.6/5.6.40/include/php
checking if debug is enabled. no
checking if zts is enabled. no
checking for re2c. no
configure: WARNING: You will need re2c 0.13.4 or later if you want to regenerate PHP parsers.
checking for gawk. no
checking for nawk. no
checking for awk. awk
checking if awk is broken. no
checking whether to enable Mongo extension. yes, shared
checking Build with OpenSSL support. yes
checking for pkg-config. /usr/local/bin/pkg-config
checking for OpenSSL version. >= 0.9.6
checking for CRYPTO_free in -lcrypto. no
configure: error: libcrypto not found!
ERROR: `/private/tmp/pear/temp/mongo/configure —with-php-config=/usr/local/opt/php@5.6/bin/php-config —with-mongo-sasl=no’ failed

This comment has been minimized.

Copy link Quote reply

rlirli commented May 18, 2020 •

@vcjuliocesar Did you try downgrading your openSSL as I mentioned in the comment before:

There are 2 uninstall commands to make sure any OpenSSL v1.1 is removed, and any dead v1.0 is removed, before installing v1.0.

This comment has been minimized.

Copy link Quote reply

avkermanov commented May 26, 2020

@rlirli Thank you so much!This is it really the only solution helped me (for MacOS Catalina)

@vcjuliocesar Did you try downgrading your openSSL as I mentioned in the comment before:

There are 2 uninstall commands to make sure any OpenSSL v1.1 is removed, and any dead v1.0 is removed, before installing v1.0.

Источник