OpenSSH升级

停止服务并卸载原有的OpenSSH

systemctl stop sshd
# 查看rpm安装的ssh
rpm -qa | grep openssh
# 卸载rpm安装的ssh
rpm -e openssh --nodeps && rpm -e openssh-clients --nodeps && rpm -e openssh-server --nodeps
# 查看rpm安装的ssh是否卸载
rpm -qa | grep openssh
# 安装相关依赖
yum install -y pam* zlib*
# 备份原ssh配置
mv /etc/ssh /etc/ssh_bak

安装OpenSSH(8.5p1)

# 安装依赖
yum -y install gcc gcc-c++ pcre pcre-devel openssl openssl-devel zlib zlib-devel
# 上传离线tar包并解压
./configure --with-zlib --with-ssl-dir --with-pam --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc/ssh
make && make install
cp contrib/redhat/sshd.init /etc/init.d/sshd
# 完成后看下ssh版本
ssh -V
OpenSSH_8.5p1, OpenSSL 1.0.2k-fips  26 Jan 2017

修改配置文件

vim /etc/ssh/sshd_config
查找#PermitRootLogin prohibit-password 改成 PermitRootLogin yes 并取消注释
同时如果端口非22端口，需要更改为对应端口

# 关闭selinux
sed -i.bak 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/sysconfig/selinux
setenforce 0

重启OpenSSH

service sshd restart
systemctl restart sshd
# 添加到自启动
chkconfig --add sshd
systemctl restart sshd
# 添加到自启动
chkconfig --add sshd