OpenSSH离线升级

查看当前版本

ssh -V

提前准备包

openssh安装包：

• openssh-xxxxx.tar.gz
• openssl-xxxxx.tar.gz
• zlib-xxxxx.tar.gz

 三个文件放到到linux的一个文件夹里；然后进行解压，编译

升级openssh的步骤

1.解压升级包

tar xzvf openssl-xxxxx.tar.gz

tar xzvf openssh-xxxxx.tar.gz

tar xzvf zlib-xxxxx.tar.gz

 2.编译安装zlib

cd zlib-xxxxx

./configure --prefix=/usr/local/zlib

make && make install

3.编译安装openssl

cd openssl-xxxxx

./config --prefix=/usr/local/ssl -d shared

echo '/usr/local/ssl/lib' >> /etc/ld.so.conf

ldconfig -v 

 4.安装openssh

cd openssh-xxxxx

./configure --prefix=/usr/local/openssh --with-zlib=/usr/local/zlib --with-ssl-dir=/usr/local/ssl

make && make install

 5.sshd_config文件修改

 

echo 'PermitRootLogin yes' >>/usr/local/openssh/etc/sshd_config

echo 'PubkeyAuthentication yes' >>/usr/local/openssh/etc/sshd_config

echo 'PasswordAuthentication yes' >>/usr/local/openssh/etc/sshd_config

 6.备份原有文件，并将新的配置复制到指定目录

mv /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

cp /usr/local/openssh/etc/sshd_config /etc/ssh/sshd_config



mv /usr/sbin/sshd /usr/sbin/sshd.bak

cp /usr/local/openssh/sbin/sshd /usr/sbin/sshd



mv /usr/bin/ssh /usr/bin/ssh.bak

cp /usr/local/openssh/bin/ssh /usr/bin/ssh



mv /usr/bin/ssh-keygen /usr/bin/ssh-keygen.bak

cp /usr/local/openssh/bin/ssh-keygen /usr/bin/ssh-keygen



mv /etc/ssh/ssh_host_ecdsa_key.pub /etc/ssh/ssh_host_ecdsa_key.pub.bak

cp /usr/local/openssh/etc/ssh_host_ecdsa_key.pub /etc/ssh/ssh_host_ecdsa_key.pub

7.启动sshd

service sshd restart

 8.查看信息版本

ssh -V