ssh-ssl编译安装

升级前准备

#下载所需依赖包#
yum install -y gcc gcc-c++ glibc make autoconf openssl openssl-devel pcre-devel pam-devel
yum install -y pam* zlib*

#下载文件#

wget https://ftp.openssl.org/source/old/1.1.1/openssl-1.1.1j.tar.gz
wget https://openbsd.hk/pub/OpenBSD/OpenSSH/portable/openssh-8.6p1.tar.gz

升级openssl
tar xvf openssl-1.1.1j.tar.gz
cd openssl-1.1.1j
./config --prefix=/usr/local/openssl --openssldir=/usr/local/ssl
make -j 2 && make install
echo /usr/local/openssl/lib >> /etc/ld.so.conf.d/openssl.conf
ldconfig
echo 'PATH=/usr/local/openssl/bin:$PATH' >> /etc/profile.d/env.sh
source /etc/profile.d/env.sh
openssl version

升级openssh
tar xvf openssh-8.6p1.tar.gz
chown -R root.root openssh-8.6p1
mkdir sshbak
mv /etc/ssh/* /opt/sshbak/
cd openssh-8.6p1
./configure --prefix=/usr/ --sysconfdir=/etc/ssh --with-openssl-includes=/usr/local/openssl/include --with-ssl-dir=/usr/local/openssl --with-zlib --with-md5-passwords --with-pam && make && make install
vim /etc/ssh/sshd_config
PermitRootLogin yes
cp -a contrib/redhat/sshd.init /etc/init.d/sshd
cp -a contrib/redhat/sshd.pam /etc/pam.d/sshd.pam
chmod +x /etc/init.d/sshd
chkconfig --add sshd
chkconfig sshd on
/etc/init.d/sshd restart