Anolis OS 8.9升级OpenSSH9.7p1

基于AnolisOS 8.9升级OpenSSH9.7p1，不升级OpenSSL.

安装依赖

yum install -y gcc openssl-devel pam-devel zlib-devel make

OpenSSH下载

wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.7p1.tar.gz
tar zxf openssh-9.7p1.tar.gz

卸载旧版本OpenSSH

rpm -qa|grep openssh
openssh-clients-8.0p1-20.0.1.an8.x86_64
openssh-8.0p1-20.0.1.an8.x86_64
openssh-server-8.0p1-20.0.1.an8.x86_64

rpm -e --nodeps openssh-8.0p1-20.0.1.an8.x86_64
rpm -e --nodeps openssh-server-8.0p1-20.0.1.an8.x86_64
rpm -e --nodeps openssh-clients-8.0p1-20.0.1.an8.x86_64

OpenSSH卸载

cd openssh-9.7p1
install -v -m700 -d /var/lib/sshd
chown -v root:sys /var/lib/sshd
groupadd -g 50 sshd
useradd -c 'sshd PrivSep' \
-d /var/lib/sshd  \
-g sshd           \
-s /bin/false     \
-u 50 sshd

./configure --prefix=/usr         \
--sysconfdir=/etc/ssh             \
--with-md5-passwords --with-zlib  \
--with-privsep-path=/var/lib/sshd

make

chmod 600 /etc/ssh/ssh_host_rsa_key
chmod 600 /etc/ssh/ssh_host_ecdsa_key
chmod 600 /etc/ssh/ssh_host_ed25519_key
make install

ssh -V

install -v -m755 contrib/ssh-copy-id /usr/bin
install -v -m644 contrib/ssh-copy-id.1 /usr/share/man/man1
install -v -m755 -d /usr/share/doc/openssh-9.7p1
install -v -m644 INSTALL LICENCE OVERVIEW README* /usr/share/doc/openssh-9.7p1

修改sshd_config

vi /etc/ssh/sshd_config
SyslogFacility AUTHPRIV
PermitRootLogin yes
PasswordAuthentication yes
UseDNS no

重启服务

cp -p contrib/redhat/sshd.init /etc/init.d/sshd
chmod +x /etc/init.d/sshd
chkconfig --add sshd
chkconfig sshd on
chkconfig --list sshd

systemctl restart sshd
systemctl status sshd

退出并登录验证