centos7.9升级ssh和openssl
一、环境
[root@tmp179 package]# ssh -V
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017
[root@tmp179 package]# cat /etc/redhat-release
CentOS Linux release 7.9.2009 (Core)
二、 升级前准备
mkdir /opt/package
cd /opt/package
wget https://www.openssl.org/source/openssl-3.1.5.tar.gz --no-check-certificate
wget https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.6p1.tar.gz --no-check-certificateyum -y install gcc gcc-c++ openssl-devel libstdc++* libcap* pam-devel zlib-devel perl perl-IPC-Cmd三、升级openssl
mv /usr/lib64/openssl /usr/lib64/openssl.old
yum remove openssl #注意输入y或者直接加-y参数再执行
tar -zxf openssl-3.1.5.tar.gz
cd /opt/package/openssl-3.1.5
./config --prefix=/usr
make && make install #顺利的话10分钟左右,可能需要20分钟
which openssl #查看升级后的Openssl路径
openssl version #确认升级是否成功，成功的话能显示版本号OpenSSL 3.1.5 30 Jan 2024 (Library: OpenSSL 3.1.5 30 Jan 2024)四、升级openssh
cd /opt/package
tar -zxf openssh-9.6p1.tar.gz
rpm -qa | grep -E "zlib-devel|openssl-devel|gcc" #需要有这些组件
mkdir /etc/ssh.bak
mv /etc/ssh/ /etc/ssh.bak/
cd /opt/package/openssh-9.6p1
./configure --prefix=/usr --sysconfdir=/etc/ssh --with-ssl-dir=/usr/local/openssl --with-md5-passwords
make && make install
cp /opt/package/openssh-9.6p1/contrib/redhat/sshd.init /etc/init.d/sshd
mv /usr/lib/systemd/system/sshd.service /usr/lib/systemd/system/sshd.service.bak
cp /etc/ssh/sshd_config{,.bak}
sed -i 's/^PermitRootLogin/#&/' /etc/ssh/sshd_config
sed -i '32i PermitRootLogin yes' /etc/ssh/sshd_config
chkconfig --add sshd
systemctl daemon-reload
systemctl restart sshd #远程连接会断开。
ssh -V #重新打开个远程连接窗口，并执行。会看到新版本OpenSSH_9.6p1, OpenSSL 3.1.5 30 Jan 2024-------ok------2024年3月9日18:11:09----------------------