SSH升级相关

关于ssh升级
1.存在缺失GCC环境需要安装GCC

yum -y install gcc gcc-c++ kernel-devel zlib-devel

2.下载openssh8.3升级包及依赖的zlib和openssl。
3.解压升级包

tar  -xvf openssh-8.3p1.tar.gz
tar  -xvf openssl-1.1.1b.tar.gz

4.安装新版 openssl

cd openssl-1.1.1b/
./config --prefix=/usr/local/ssl -d shared
make && make install
mv /usr/bin/openssl /usr/bin/openssl_bak
mv /usr/lib64/openssl /usr/lib64/openssl_bak  
mv /usr/lib64/libssl.so.10 /usr/lib64/libssl.so.10_bak
mv /usr/local/ssl/bin/openssl /usr/bin/openssl
mv /usr/local/ssl/include/openssl /usr/include/openssl
mv /usr/local/ssl/lib/libssl.so /usr/lib64/libssl.so
echo '/usr/local/ssl/lib' >> /etc/ld.so.conf      #修改配置文件
ldconfig -v     #配置动态链接库
openssl version    #查看openssl版本

5.#配置文件的软链接

ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/ssl/include/openssl /usr/include/openssl
ln -s /usr/local/ssl/lib/libssl.so /usr/lib64/libssl.so 

6.安装openssh

cd openssh-8.3p1
./configure --prefix=/usr/local/openssh --with-zlib=/usr/local/zlib --with-ssl-dir=/usr/local/ssl
make && make install
 

#sshd_config文件修改

echo 'PermitRootLogin yes' >>/usr/local/openssh/etc/sshd_config
echo 'PubkeyAuthentication yes' >>/usr/local/openssh/etc/sshd_config
echo 'PasswordAuthentication yes' >>/usr/local/openssh/etc/sshd_config

#备份原有文件，并将新的配置复制到指定目录

mv /etc/ssh/sshd_config /etc/ssh/sshd_config.bak
cp /usr/local/openssh/etc/sshd_c