openssh+openssl升级至最新版本

######################OPENSSL-SSH升级#################################

安装依赖包

yum -y install zlib zlib-devel pam-devel gcc perl* -y

创建文件存储目录

mkdir /data/install-page && cd /data/install-page

下载源码包
wget https://www.openssl.org/source/openssl-3.2.0.tar.gz -no-check-certificate

wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.5p1.tar.gz

安装openssl

ls /usr/bin/openssl

mv /usr/bin/openssl /usr/bin/openssl_bak

tar zvxf openssl-3.2.0.tar.gz && cd cd openssl-3.2.0

./config --prefix=/usr/local/openssl --shared && make -j && make install

cp -i   /usr/local/openssl/include/openssl/* /usr/include/openssl/

ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl

`echo "/usr/local/openssl/lib64" >>/etc/ld.so.conf`

cp libcrypto.so.1.1 /usr/lib64/ && cp libssl.so.1.1 /usr/lib64/

ldconfig -v

ldconfig -p | grep libssl.so.3

openssl version

安装openssh

cd /etc/ssh && mkdir –p /root/sshbak && mv ./* /root/sshbak

cd /data/install-page && tar zvxf openssh-9.5p1.tar.gz && cd /data/install-page/openssh-9.5p1

./configure --prefix=/usr/local/openssh --sysconfdir=/etc/ssh --with-openssl-includes=/usr/local/openssl/include --with-ssl-dir=/usr/local/openssl --with-zlib --with-md5-passwords --with-pam

make -j && make install

mv /usr/bin/ssh /usr/bin/ssh.bak

cp -i /usr/local/openssh/bin/* /usr/bin/

mv /usr/sbin/sshd /usr/sbin/sshd.bak

cp /usr/local/openssh/sbin/sshd /usr/sbin/sshd

cp -a contrib/redhat/sshd.init /etc/init.d/sshd

cp -a contrib/redhat/sshd.pam /etc/pam.d/sshd.pam

sed -i "s/Type\=notify/Type\=simple/g" /usr/lib/systemd/system/sshd.service

chmod +x /etc/init.d/sshd

systemctl daemon-reload

systemctl enable sshd

systemctl restart sshd

ssh -V