DataIQ 2.2.x.x Installation Guide

Upgrade OpenSSL

To address a security vulnerability (CVE-2021-3712), update OpenSSL to version 1.1.1n or later.

1. On the DataIQ host, from a command line, check the version of OpenSSL on your system.

   openssl version

   The version is shown. For example:

   OpenSSL 1.0.2k-fips  26 Jan 2017

   If the version is 1.1.1n or later, you can skip the rest of this topic. Example:

   OpenSSL 1.1.1n  24 Aug 2021

2. On a computer connected to the internet, download the OpenSSL installation files from https://www.openssl.org/source/, for example, openssl-1.1.1n.tar.gz, and then transfer them to the DataIQ host.
3. From the DataIQ host, remove the previous version of OpenSSL:

   yum remove -y openssl

4. Install Openssl 1.1.1n using tarball:

   yum install -y make gcc perl pcre-devel zlib-devel perl-core

5. Verify the installation file by comparing the MD5 checksum value. Example:

   md5sum openssl-1.1.1n.tar.gz

   The MD5 checksum for OpenSSL version 1.1.1n should be MD5_HASH=2aad5635f9bb338bc2c6b7d19cbc9676.
6. Extract the installer. Example:

   tar -xvf openssl-1.1.1n.tar.gz

7. Compile and install OpenSSL. Example:

   cd openssl-1.1.1n
   
   ./config
   
   make
   
   make install
   
   export LD_LIBRARY_PATH="/usr/local/lib:/usr/local/lib64"
   
   echo "export LD_LIBRARY_PATH=/usr/local/lib:/usr/local/lib64" >> ~/.bashrc

8. Check the version of OpenSSL on your system. The version should now be 1.1.1n or later. Example:

   [root@...]# openssl version
   OpenSSL 1.1.1n  24 Aug 2021

   NOTE If you receive the message: "No such file or directory," you can try either of the following steps:

   • Close and reopen the connection to DataIQ, and check the version again.

   • Or, add the directories: /usr/local/sbin and /usr/local/bin to the system path and try again:

     export PATH=$PATH:/usr/local/sbin:/usr/local/bin

9. Optional: Cleanup the installation by removing the installation files. Example:

   cd ..
   
   rm -rf openssl-1.1.1n
   
   rm -rf openssl-1.1.1n.tar.gz
   
   yum remove -y pcre-devel zlib-devel perl-core