原文参考 http://www.cnblogs.com/xshrim/p/6472679.html非常感谢!!
下载两个文件
openssh-7.5p1.tar.gz openssl-1.0.2l.tar.gz
1、配置本地yum源
将操作系统镜像上传到服务器中,进行挂载
#mount -o loop rhel-server-6.7-x86_64-dvd.iso/mnt
使用光驱则用以下:
#mount /dev/cdrom /mnt/
yum源配置文件
#vi /etc/yum.repos.d
baseurl=file:///mnt/Server
enabled=1
gpgcheck=0
……
# yum clean all #清除yum缓存,使当前配置生效 # yum list #查看是否配置成功
2、安装编译所需工具包
# yum -y install gcc pam-devel zlib-devel
3、升级OpenSSL
A、备份当前openssl
# find / -name openssl
# mv /usr/lib64/openssl/usr/lib64/openssl.old
# mv /usr/bin/openssl /usr/bin/openssl.old
# mv /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/openssl.old
# mv/usr/include/openssl /usr/include/openssl.old
如下两个库文件必须先备份,因系统内部分工具(如yum、wget等)依赖此库,而新版OpenSSL不包含这两个库
# cp /usr/lib64/libcrypto.so.10 /usr/lib64/libcrypto.so.10.old
# cp /usr/lib64/libssl.so.10 /usr/lib64/libssl.so.10.old
B、卸载当前openssl
# rpm -qa | grep openssl
# rpm -e --nodepsopenssl-1.0.1e-15.el6.x86_64
# rpm -e --nodepsopenssl-devel-1.0.1e-15.el6.x86_64
C、解压openssl_1.0.2l源码并编译安装
# tar -zxvf openssl-1.0.2l.tar.gz
# cd openssl-1.0.2l
# ./config --prefix=/usr --openssldir=/etc/ssl --shared zlib
# make
# make test
# make install
# openssl version -a #查看是否升级成功
D、恢复共享库 (……)
# mv /usr/lib64/libcrypto.so.10.old /usr/lib64/libcrypto.so.10
# mv /usr/lib64/libssl.so.10.old /usr/lib64/libssl.so.10
2.3、升级OpenSSH
A、备份当前openssh
# mv /etc/ssh /etc/ssh.old
B、卸载当前openssh
# rpm -qa | grep openssh
openssh-askpass-5.3p1-94.el6.x86_64
openssh-5.3p1-94.el6.x86_64
openssh-clients-5.3p1-94.el6.x86_64
openssh-server-5.3p1-94.el6.x86_64
# rpm -e --nodepsopenssh-askpass-5.3p1-94.el6.x86_64
# rpm-e --nodeps openssh-5.3p1-94.el6.x86_64
# rpm-e --nodeps openssh-clients-5.3p1-94.el6.x86_64
# rpm-e --nodeps openssh-server-5.3p1-94.el6.x86_64
# rpm-qa | grep openssh
或者直接执行此命令:rpm -qa |grep openssh|xargs -i rpm -e --nodeps{}
C、openssh安装前环境配置
# install -v -m700 -d /var/lib/sshd
# chown -v root:sys/var/lib/sshd
# groupadd-g 50 sshd
# useradd -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u 50 sshd
D、解压openssh_7.5p1源码并编译安装
# tar -zxvf openssh-7.5p1.tar.gz
# cd openssh-7.5p1
# ./configure--prefix=/usr --sysconfdir=/etc/ssh --with-md5-passwords --with-pam --with-zlib--with-openssl-includes=/usr --with-privsep-path=/var/lib/sshd
# make
# make install
E、openssh安装后环境配置
# 在openssh编译目录执行如下命令
# install -v -m755 contrib/ssh-copy-id /usr/bin
# install -v -m644 contrib/ssh-copy-id.1 /usr/share/man/man1
# install -v -m755 -d /usr/share/doc/openssh-7.5p1
# install -v -m644 INSTALL LICENCE OVERVIEW README* /usr/share/doc/openssh-7.5p1
# ssh -V #验证是否升级成功
F、启用OpenSSH服务
# 在openssh编译目录执行如下目录
# echo 'X11Forwardingyes' >> /etc/ssh/sshd_config
# echo "PermitRootLoginyes" >> /etc/ssh/sshd_config #允许root用户通过ssh登录
# echo "Allowusers root" >>/etc/ssh/sshd_config
# cp -p contrib/redhat/sshd.init /etc/init.d/sshd
# chmod +x /etc/init.d/sshd
# chkconfig --add sshd
# chkconfig sshd on
# chkconfig --list sshd
# service sshd restart
机子重启后不重启服务不能连,受selinux影响,
# vi /etc/selinux/config
修改 SELINUX=disabled
如使用的连接工具无法连接,下载最新版本的putty、WinSCP。