Redhat openssh8.4p1升级

准备工作开启telnet以防服务器升级ssh失败造成服务器无法连接安装telnetredhat 7.x版本安装yum install telnet-server.x86_64 yum install telnet.x86_64 yum install xinetd.x86_64启动服务systemctl start xinetd systemctl start telnet.socketredhat 6.x版本安装yum install xinetd yum install telnet yum install telnet-server启动服务service xinetd starttelnet激活需要更改以下文件vim /etc/xinetd.d/telnet 将disabled 改成no vim /etc/pam.d/remote 将第二行屏蔽掉 #auth required pam_securetty.so # 重启 service xinetd restart安装依赖安装以下依赖yum install -y gcc gcc-c glibc make autoconf openssl openssl-devel pcre-devel pam-devel开始安装以下操作全部在root用户下1、备份openssh的配置文件cp -r /etc/ssh/ /etc/ssh_bak_2 cp /etc/init.d/sshd /etc/init.d/sshd_bak_2 cp /usr/sbin/sshd /usr/sbin/sshd_bak_22、解压文件tar -xzvf openssh-8.4p1.tar.gz tar -xzvf openssl-1.1.1h.tar.gz tar -xzvf zlib-1.2.11.tar.gz3、安装opensslcd openssl-1.1.1h ./config --prefix/usr --shared # 编译安装 make make install4、安装zlibcd ../zlib-1.2.11 ./configure make make install5、安装opensshcd ../openssh-8.4p1 ./configure make make install6、以上编译安装完成下面替换文件cp contrib/redhat/sshd.init /etc/init.d/sshd chkconfig sshd --add cp ssh scp sftp ssh-keygen ssh-add ssh-agent ssh-keyscan /usr/bin/ rm -rf /usr/sbin/sshd cp sshd /usr/sbin/ ln -s /usr/lib64/libssl.so /usr/lib64/libssl.so.10 ln -s /usr/lib64/libcrypto.so.1.0.0 /usr/lib64/libcrypto.so.10 cp ssh_config sshd_config /etc/ssh/ cp sftp-server ssh-keysign ssh-pkcs11-helper /usr/libexec/ cp scp.1 ssh-add.1 sftp.1 ssh-keyscan.1 ssh-agent.1 /usr/share/man/man1/ cp sshd.8 sftp-server.8 ssh-keysign.8 ssh-pkcs11-helper.8 /usr/share/man/man8/ touch /etc/ssh/ssh_host_ecdsa_key.pub修改ssh配置vi /etc/ssh/sshd_config PermitRootLogin yes #禁止root登录8.4p1默认禁止root用户登录如有需要改为yes PubkeyAuthentication yes PasswordAuthentication yes7、启动sshservice sshd restart8、验证ssh -V 提示OpenSSH_8.4p1, OpenSSL 1.1.1h 表示升级成功9、恢复telnet配置vim /etc/xinetd.d/telnet 将disabled 改成no vim /etc/pam.d/remote auth required pam_securetty.so #重启 service xinetd restartopenssh升级文件