更新Openssh9.1,openssl3.0

更新Openssh9.1,openssl3.0

1.利用yum安装依赖包

yum -y install gcc gcc-c++ zlib zlib-devel openssl openssl-devel pam-devel libselinux-devel perl-IPC-Cmd  perl-ExtUtils-CBuilder perl-ExtUtils-MakeMaker

2.上传更新的tar包进行解压

tar -zxvf zlib-1.2.13.tar.gz
tar -zxvf openssl-3.0.7.tar.gz
tar -zxvf openssh-9.1p1.tar.gz 

3.安装zlib

cd zlib-1.2.13
./configure --prefix=/usr/local/zlib
make && make install

4.安装openssl

cd openssl-3.0.7
./config --prefix=/usr/local/ssl -d shared
make && make install

mv /usr/bin/openssl /usr/bin/openssl.old
ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/ssl/include/openssl /usr/include/openssl

ln -s /usr/local/ssl/lib64/libssl.so.3  /usr/lib64/libssl.so.3
ln -s /usr/local/ssl/lib64/libcrypto.so.3  /usr/lib64/libcrypto.so.3

echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
ldconfig -v

5.安装 openssh

cd openssh-9.1p1/
./configure --prefix=/usr/local/openssh --with-zlib=/usr/local/zlib --with-ssl-dir=/usr/local/ssl
make && make install

6.卸载由yum安装的openssh

yum remove openssh

7.修改配置
启动前要将新生成的sshd_config修改以下几个地方

vim /usr/local/openssh/etc/sshd_config
PermitRootLogin yes
PubkeyAuthentication yes
PasswordAuthentication yes

复制文件到相应系统文件夹

cp /home/apache/openssh-9.1p1/contrib/redhat/sshd.init /etc/init.d/sshd
chkconfig --add sshd
cp /usr/local/openssh/etc/sshd_config /etc/ssh/sshd_config
cp /usr/local/openssh/sbin/sshd /usr/sbin/sshd
cp /usr/local/openssh/bin/* /usr/bin/
cp /usr/local/openssh/etc/ssh_host_ecdsa_key.pub /etc/ssh/ssh_host_ecdsa_key.pub

8.启动，重启

systemctl start sshd.service
systemctl restart sshd.service

9.查看状态和升级结果

systemctl status sshd.service
sshd -t
ssh -V
openssl version