openssh升级

[root@VM-20-13-centos network-scripts]# ssh -V
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017
yum list | grep telnet

OpenSSH需要依赖ZLIB和OpenSSL
rpm -qa |grep zlib
openssl version -a
因升级OpenSSH过程中需要卸载现有OpenSSH,因此为了保持服务器的远程连接可用，需要启用telnet服务作为替代，如升级出现问题，也可通过telnet登录服务器进行回退。

yum install telnet telnet-server xinetd

yum install telnet root@VM-20-13-centos ~]# yum list | grep telnet
Repository epel is listed more than once in the configuration
telnet.x86_64 1:0.17-66.el7 @updates
telnet-server.x86_64 1:0.17-66.el7 @updates
dcap-tunnel-telnet.x86_64 2.47.14-1.el7 epel
libguac-client-telnet.x86_64 1:1.5.5-1.el7 epel
libtelnet.x86_64 0.23-1.el7 epel
libtelnet-devel.x86_64 0.23-1.el7 epel
libtelnet-utils.x86_64
安装openssl:
依赖：yum install gcc*
whereis openssl
mv /usr/bin/openssl /usr/bin/openssl.bak
mv /usr/lib64/openssl /usr/lib64/openssl.old
卸载openssl
yum remove openssl
wget https://www.openssl.org/source/openssl-1.1.1w.tar.gz –no-check-certificate

tar -xzvf openssl-1.1.1w.tar.gz

cd openssl-1.1.1w/

./config –prefix=/usr

make && make install

安装openssh

https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/
https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.7p1.tar.gz
tar -zxvf openssh-9.7p1.tar.gz
cd openssh-9.7p1.tar.gz/
./configure –prefix=/usr –sysconfdir=/etc/ssh –with-pam –with-ssl-dir=/usr/local/lib64/

查找所有名称中包含”openssh”的rpm包，并使用rpm -e命令将它们全部卸载，参数–nodeps忽略依赖关系
sudo rpm -e $(rpm -qa | grep openssh) –nodeps或sudo rpm -e rpm -qa | grep openssh –nodeps

cp -r /etc/ssh /etc/ssh.bak
rm -rf /etc/ssh/*

tar -zxvf openssh9.7p1-tar.gz -C /usr/local/src
ssh -V
chown -R root:root /usr/local/src/openssh-8.1p1
yum install gcc gcc-c++ make autoconf openssl oipenssl-devel prce-devel pam-devel -y
./configure –prefix=/usr –sysconfdir=/etc/ssh –with-zlib –with-md5-passwords –with-pam
make && make install
cd /etc/pam.d/
mv sshd.bak sshd
cd openssh-9.7p1/
cp -a contrib/redhat/ssd.init /etc/init.d/sshd

chmod +x /etc/init.d/sshd
echo “PermitRootLogin yes” >> /etc/ssh/sshd_config
设置开机自启ssh服务
chkconfig –add sshd(chkconfig命令用来更新、查询、修改不同运行级上的系统服务)
chkconfig sshd on
chkconfig –list
service sshd start
ssh -V

感谢您的来访，获取更多精彩文章请收藏本站。