3.3 Installing OpenSSL

If you have the evaluation version of Connext DDS: OpenSSL is installed automatically with the evaluation bundle. The following instructions are only for non-evaluation users.

RTI provides: 

• An OpenSSL host package, which enables OpenSSL for RTI's applications such as RTI Admin Console, RTI Routing Service, rtiddsspy, etc.
• An OpenSSL target bundle, which provides OpenSSL libraries that can be used to secure your applications.

3.3.1 Linux and macOS Systems

1. Make sure you've installed host and target Security Plugins packages as described in 3.2 Installing a Non-Evaluation Version.
2. Install an OpenSSL host package from RTI: openssl-1.1.1d-host-<host platform>.rtipkg. (Use the same process that you used for the .rtipkg files in the previous step.)
3. Install an OpenSSL target bundle from RTI: openssl-1.1.1d-target-<target architecture>.tar.gz.
   1. Move the downloaded OpenSSL distribution file to a directory of your choice, such as /local/rti, and change to that directory. For example:

   $ cd /local/rti

   2. Use unzip to uncompress the openssl-1.1.1d-target-<target architecture>.tar.gz file. For example (your filename may be different):

   $ unzip openssl-1.1.1d-target-armv7aQNX6.6.0qcc_cpp4.7.3.tar.gz

   Note:  If unzip does not work, you may need GNU's version, gunzip.

   3. Use tar to extract the distribution from the uncompressed file. For example:

   $ tar xvf openssl-1.1.1d-target-armv7aQNX6.6.0qcc_cpp4.7.3.tar

   This will extract files into /local/rti/openssl-1.1.1d.

   Note: If unzip and tar do not work on your system, you may need GNU's version, gunzip and gtar (which handles long file names).

   4. Include the resulting /bin directory in your PATH. For example, assuming you want to use the "release" version of the OpenSSL libraries (enter the command all on one line):

   $ export PATH=
     /local/rti/openssl-1.1.1d/armv7aQNX6.6.0qcc_cpp4.7.3/release/bin:${PATH}

   5. If linking dynamically, include the resulting /lib directory in your LD_LIBRARY_PATH. For example, assuming you want to use the release version of the OpenSSL libraries (enter the command all on one line):

   $ export LD_LIBRARY_PATH=
     /local/rti/openssl-1.1.1d/armv7aQNX6.6.0qcc_cpp4.7.3/release/lib:$LD_LIBRARY_PATH

   6. To verify your installation, enter:

      $ openssl version

   You should see a response similar to:

   OpenSSL 1.1.1d

   If you get a version other than OpenSSL 1.1.1d, your PATH may be pointing with a higher precedence to a different version of OpenSSL. You may need to place version 1.1.1d first or earlier in your PATH.

   Note: When running the openssl version command, you may run into this OpenSSL warning:

   WARNING: can't open config file: [default openssl built-in path]/openssl.cnf

   To resolve this issue, set the environment variable OPENSSL_CONF to the path to the openssl.cnf file you are using. For example (enter this all on one line):

   $ export OPENSSL_CONF=
     /home/<your user name>/rti_workspace/6.0.1/examples/dds_security/cert/openssl.cnf

3.3.2 Windows Systems

1. Make sure you've installed host and target Security Plugins packages as described in 3.2 Installing a Non-Evaluation Version.
2. Install an OpenSSL host package from RTI: openssl-1.1.1d-host-<host platform>.rtipkg. (Use the same process that you used for the .rtipkg files in the previous step.)
3. Install an OpenSSL target bundle from RTI: openssl-1.1.1d-target-<target architecture>.zip:
   1. Right-click the distribution file and extract the contents in a directory of your choice.
   2. Add the resulting bin directory to your Path environment variable:

   c:\rti\openssl-1.1.1d\<target architecture>\release\bin

   (If you need help with this process, please see RTI Connext DDS Core Libraries Getting Started Guide.)

   3. To verify your installation, open a command prompt and enter:

   > openssl version

   You should see a response similar to:

   OpenSSL 1.1.1d

   If you get a version other than OpenSSL 1.1.1d, your PATH may be pointing with a higher precedence to a different version of OpenSSL. You may need to place version 1.1.1d first or earlier in your path.

   Note: When running the above command, you may run into this OpenSSL warning:

   WARNING: can't open config file: [default openssl built-in path]/openssl.cnf

   To resolve this issue, set the environment variable OPENSSL_CONF to the path to the openssl.cnf file you are using. For example (enter this all on one line):

   > set OPENSSL_CONF=c:\Users\<your user name>\Documents\rti_workspace\6.0.1\examples\dds_security\cert\openssl.cnf

© 2020 RTI