centos 6.5 升级openssh-7.5

1、环境

2、安装telnet 服务，防止ssh升级之后登陆不上服务器，使用telnet 连接服务器

yum install telnet-server -y

chkconfig telnet on

/etc/init.d/xinetd start

netstat -lntup|grep 23

echo "pts/0" >>/etc/securetty
       echo "pts/1" >>/etc/securetty

vi /etc/pam.d/remote
     #%PAM-1.0
     #auth       required     pam_securetty.so  注释这行

/etc/init.d/xinetd  restart

测试telnet 登录

3、安装openssh依赖包
   yum -y install gcc-c++ zlib zlib-devel pam-devel

并对一些依赖包进行备份

cp /usr/lib64/libssl.so.1.0.1e{,.bak}

cp /usr/lib64/libcrypto.so.1.0.1e{,.bak}

4、现在openssl 源码包

cd /data/tools
 
wget https://www.openssl.org/source/openssl-1.0.2h.tar.gz
tar xf openssl-1.0.2h.tar.gz
cd openssl-1.0.2h
 
#--shared 参数一定要加上，不然编译openssh，会有各种各种报错
./config --shared
 
make

删除系统上的openssl 

mv /usr/bin/openssl /usr/bin/openssl.bak
 
rpm -e `rpm -qa | grep openssl` --nodeps
 
make install
 
ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/ssl/include/openssl /usr/include/openssl
echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
ldconfig -v
cp -a /usr/local/ssl/lib/libcrypto.so.1.0.0 /usr/lib64/
openssl version -a

5、编译安装openssh

wget https://openbsd.hk/pub/OpenBSD/OpenSSH/portable/openssh-7.5p1.tar.gz
 
tar xf openssh-.5p1.tar.gz
cd openssh-.5p1
mv /etc/pam.d/sshd /etc/pam.d/sshd.old
 ./configure --prefix=/usr --sysconfdir=/etc/ssh --with-pam --with-zlib --with-ssl-dir=/usr/local/ssl --with-md5-passwords --mandir=/usr/share/man
make
 
rpm -e `rpm -qa | grep openssh` --nodeps
make install
cp contrib/redhat/sshd.init /etc/init.d/sshd
 
ssh -V
 
/etc/init.d/sshd restart

ssh登录，可以之后关闭telnet服务