编译安装升级Openssh新版本

1
# lsb_release -d
2
Description:  CentOS Linux release 7.9.2009 (Core)
3

4
#uname -r
5
3.10.0-327.el7.x86_64
6

7
#ssh -V
8
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips  26 Jan 2017

1
# rpm -qa | grep zlib       查看系统zlib包环境
2
zlib-1.2.7-19.el7_9.x86_64
3
zlib-1.2.7-19.el7_9.i686
4

5
# yum install zlib-devel -y
6

7
# rpm -qa | grep zlib
8
zlib-1.2.7-19.el7_9.x86_64
9
zlib-devel-1.2.7-19.el7_9.x86_64
10
zlib-1.2.7-19.el7_9.i686

1
# tar -xvf openssl-1.1.1l.tar.gz
2

3
# cd openssl-1.1.1l
4

5
# ./config --perfix=/usr/local/openssl
6
# make && make install
7

8
# echo '/usr/local/openssl/lib' >> /etc/ld.so.conf
9
# ldconfig -v
10

11
检查编译安装和系统自带的openssl版本是否正常
12
# /usr/local/openssl/bin           进入编译openssl目录
13
# ./openssl version
14
Openssl 1.1.1l  25 Aug 2021        编译后openssl版本
15

16
# openssl version
17
OpenSSL 1.0.2k-fips  26 Jan 2017   系统自带版本

1
# rpm -qa | grep openssh
2
openssh-server-7.4p1-21.el7.x86_64
3
openssh-clients-7.4p1-21.el7.x86_64
4
openssh-7.4p1-21.el7.x86_64
5

6
备份原版openssh配置
7
# cp -rf /etc/ssh /etc/ssh_bak
8

9
# rpm -e --nodeps `rpm -qa | grep openssh`      执行卸载openssh
10
# rpm -qa | grep openssh                        查看openssh
11

12
验证基础工具正常使用，执行命令无报错即可
13
# curl -V
14
# wget -V
15
# yum --version

1
# tar -xvf openssh-8.7.tar.gz
2
# cd openssh-8.7
3
# ./configure --prefix=/usr/local/openssh --sysconfdir=/etc/ssh  --with-ssl-dir=/usr/local/openssl
4
# make && make install
5

6
复制可执行文件到系统`bin`目录下
7
# cp /usr/local/openssh/sbin/sshd /usr/sbin/sshd
8
# cp /usr/local/openssh/bin/ssh /usr/bin/ssh
9
# cp /usr/local/openssh/bin/ssh-keygen /usr/bin/ssh-keygen
10

11
复制sshd启动脚本
12
# cp contrib/redhat/sshd.init /etc/init.d/sshd

1
Port 22                      监听端口
2
PermitRootLogin yes          允许root登录
3
PasswordAuthentication yes   密码验证
4

5
在文件末尾加入如下内容：
6
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1

1
# /etc/init.d/sshd start
2
Starting sshd:                                             [确定]

1
# netstat -tpln | grep ssh
2
tcp        0      0 0.0.0.0:22               0.0.0.0:*
3

4
添加sshd开机自启
5
# chkconfig --list | grep sshd  查看当前系统sshd是否添加开机自启
6
# chkconfig sshd on             加入开机自启
7
# chkconfig --list | grep sshd  确认加入开机自启是否正常
8
sshd             0:关闭  1:关闭  2:启用  3:启用  4:启用  5:启用  6:关闭

1
# ssh -V
2
OpenSSH_8.7p1, OpenSSL 1.1.1l  25 Aug 2021