【ssh】CentOS升级OpenSSH到最新版本

一、安装telnet服务

升级安装openssh需要停止服务，适用telnet暂时代替远程连接，安装完成后再卸载

1.安装telnet

yum -y install telnet-server* telnet

2.配置telnet

# vi /etc/xinetd.d/telnet 
#将其中disable字段的yes改为no以启用telnet服务 
# mv /etc/securetty /etc/securetty.old    #允许root用户通过telnet登录

3.启动telnet

# service xinetd start                    #启动telnet服务 
# chkconfig xinetd on                    #使telnet服务开机启动，避免升级过程中服务器意外重启后无法远程登录系统

二、升级openssh

1.安装准备

yum install gcc pam-devel openssl-devel gcc-c++ make -y

2.备份当前openssh

mv /etc/ssh /etc/ssh.old 
mv /etc/init.d/sshd /etc/init.d/sshd.old

3.卸载当前openssh

# rpm -qa | grep openssh 
openssh-clients-5.3p1-104.el6.x86_64 
openssh-server-5.3p1-104.el6.x86_64 
openssh-5.3p1-104.el6.x86_64 
openssh-askpass-5.3p1-104.el6.x86_64 
# rpm -e --nodeps openssh-5.3p1-104.el6.x86_64 
# rpm -e --nodeps openssh-server-5.3p1-104.el6.x86_64 
# rpm -e --nodeps openssh-clients-5.3p1-104.el6.x86_64 
# rpm -e --nodeps openssh-askpass-5.3p1-104.el6.x86_64 
# rpm -qa | grep openssh 

注意：卸载过程中如果出现以下错误

# rpm -e --nodeps openssh-server-5.3p1-104.el6.x86_64  
error reading information on service sshd: No such file or directory 
error: %preun(openssh-server-5.3p1-104.el6.x86_64) scriptlet failed, exit status 1 

解决办法：

#rpm -e --noscripts openssh-server-5.3p1-104.el6.x86_64

4.openssh安装前环境配置

# install -v -m700 -d /var/lib/sshd 
# chown -v root:sys /var/lib/sshd 

5.解压openssh_7.7p1源码并编译安装

get https://openbsd.hk/pub/OpenBSD/OpenSSH/portable/openssh-7.7p1.tar.gz
tar -zxf openssh-7.7p1.tar.gz
cd openssh-7.7p1
./configure --prefix=/usr --sysconfdir=/etc/ssh --with-md5-passwords --with-pam --with-ssl --with-zlib --with-openssl-includes=/usr --with-privsep-path=/var/lib/sshd mandir=/usr/share/man/
 make && make install

6.启用OpenSSH服务

# 在openssh编译目录执行如下目录 
# echo 'X11Forwarding yes' >> /etc/ssh/sshd_config 
# echo "PermitRootLogin yes" >> /etc/ssh/sshd_config  #允许root用户通过ssh登录 
# cp -p contrib/RedHat/sshd.init /etc/init.d/sshd 
# chmod +x /etc/init.d/sshd 
# chkconfig  --add  sshd 
# chkconfig  sshd  on 
# chkconfig  --list  sshd 
# service sshd restart

三、清理telnet