Redhat 6.5 x64升级SSH到OpenSSH_7.5p1

原文参考  http://www.cnblogs.com/xshrim/p/6472679.html非常感谢！！

 

下载两个文件

openssh-7.5p1.tar.gz    openssl-1.0.2l.tar.gz

1、配置本地yum源

将操作系统镜像上传到服务器中，进行挂载

#mount -o loop rhel-server-6.7-x86_64-dvd.iso/mnt

使用光驱则用以下：

#mount  /dev/cdrom /mnt/

yum源配置文件

#vi /etc/yum.repos.d

baseurl=file:///mnt/Server

enabled=1

gpgcheck=0

……

# yum clean all       #清除yum缓存，使当前配置生效
# yum list            #查看是否配置成功

 

 

2、安装编译所需工具包

# yum -y install gcc pam-devel zlib-devel

 

3、升级OpenSSL

 A、备份当前openssl

# find / -name openssl

 

# mv  /usr/lib64/openssl/usr/lib64/openssl.old

# mv /usr/bin/openssl  /usr/bin/openssl.old

# mv /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/openssl.old

# mv/usr/include/openssl /usr/include/openssl.old

 如下两个库文件必须先备份，因系统内部分工具（如yum、wget等）依赖此库，而新版OpenSSL不包含这两个库

  # cp  /usr/lib64/libcrypto.so.10 /usr/lib64/libcrypto.so.10.old

  # cp  /usr/lib64/libssl.so.10 /usr/lib64/libssl.so.10.old

 

B、卸载当前openssl

# rpm -qa | grep openssl

# rpm -e --nodepsopenssl-1.0.1e-15.el6.x86_64

# rpm -e --nodepsopenssl-devel-1.0.1e-15.el6.x86_64

C、解压openssl_1.0.2l源码并编译安装

# tar -zxvf openssl-1.0.2l.tar.gz

# cd openssl-1.0.2l

# ./config --prefix=/usr --openssldir=/etc/ssl --shared zlib 

# make

# make test                       

# make install

# openssl version -a                   #查看是否升级成功

 

D、恢复共享库 (……)

# mv  /usr/lib64/libcrypto.so.10.old /usr/lib64/libcrypto.so.10

# mv  /usr/lib64/libssl.so.10.old  /usr/lib64/libssl.so.10

 

2.3、升级OpenSSH

 A、备份当前openssh

# mv /etc/ssh /etc/ssh.old

B、卸载当前openssh

# rpm -qa | grep openssh

openssh-askpass-5.3p1-94.el6.x86_64

openssh-5.3p1-94.el6.x86_64

openssh-clients-5.3p1-94.el6.x86_64

openssh-server-5.3p1-94.el6.x86_64

# rpm -e --nodepsopenssh-askpass-5.3p1-94.el6.x86_64

# rpm-e --nodeps openssh-5.3p1-94.el6.x86_64

# rpm-e --nodeps openssh-clients-5.3p1-94.el6.x86_64

# rpm-e --nodeps openssh-server-5.3p1-94.el6.x86_64

# rpm-qa | grep openssh

或者直接执行此命令：rpm -qa |grep openssh|xargs -i rpm -e --nodeps{}

C、openssh安装前环境配置

# install  -v -m700 -d /var/lib/sshd

# chown  -v root:sys/var/lib/sshd

# groupadd-g 50 sshd

# useradd  -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u 50 sshd

D、解压openssh_7.5p1源码并编译安装

# tar -zxvf openssh-7.5p1.tar.gz

# cd openssh-7.5p1

# ./configure--prefix=/usr  --sysconfdir=/etc/ssh --with-md5-passwords --with-pam  --with-zlib--with-openssl-includes=/usr --with-privsep-path=/var/lib/sshd

# make

# make install

E、openssh安装后环境配置

# 在openssh编译目录执行如下命令
# install -v -m755    contrib/ssh-copy-id /usr/bin

# install -v -m644   contrib/ssh-copy-id.1 /usr/share/man/man1

# install -v -m755 -d /usr/share/doc/openssh-7.5p1

# install -v -m644   INSTALL LICENCE OVERVIEW README* /usr/share/doc/openssh-7.5p1
# ssh -V             #验证是否升级成功

 F、启用OpenSSH服务

# 在openssh编译目录执行如下目录
# echo 'X11Forwardingyes' >> /etc/ssh/sshd_config

# echo "PermitRootLoginyes" >> /etc/ssh/sshd_config   #允许root用户通过ssh登录

# echo "Allowusers root" >>/etc/ssh/sshd_config

# cp -p contrib/redhat/sshd.init /etc/init.d/sshd

# chmod +x /etc/init.d/sshd

# chkconfig  --add  sshd

# chkconfig sshd  on

# chkconfig  --list  sshd

# service sshd restart

 

机子重启后不重启服务不能连，受selinux影响，

# vi /etc/selinux/config

修改 SELINUX=disabled

 

如使用的连接工具无法连接，下载最新版本的putty、WinSCP。