- 确认本机的openssl , openssh 版本
ssh -V
//OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017
- 下载最新的源码
cd /usr/local/src/
wget https://mirrors.aliyun.com/pub/OpenBSD/OpenSSH/portable/openssh-9.0p1.tar.gz
git clone git://git.openssl.org/openssl.git
//或者从github 下载
git clone https://github.com/openssl/openssl.git
- 准备工作
yum install zlib-devel
yum install pam-devel
yum install perl-CPAN
//第一次使用需要配置下. 选择镜像那一步最好手动配置阿里云的源.
//[https://mirrors.aliyun.com/CPAN/](https://mirrors.aliyun.com/CPAN/)
perl -MCPAN -e shell
cpan[1]> install IPC/Cmd.pm
- 升级openssl
cd openssl
git checkout openssl-3.0.3
./config --prefix=/usr/local/openssl
make
make install
ldd /usr/local/openssl/bin/openssl
echo "/usr/local/openssl/lib64" >> /etc/ld.so.conf.d/openssl-3.0.3.conf
ldconfig -v
mv /usr/bin/openssl /usr/bin/openssl_old_bk
ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl
which openssl
openssl version -a
- 升级openssh
//备份
mkdir -p /usr/local/src/openssh_bk/bin
mkdir -p /usr/local/src/openssh_bk/sbin
mv /etc/ssh /usr/local/src/openssh_bk/etc_ssh
mv /usr/bin/ssh* /usr/local/src/openssh_bk/bin/
mv /usr/sbin/ssh* /usr/local/src/openssh_bk/sbin/
mv /etc/sysconfig/sshd /usr/local/src/openssh_bk/sysconfig_sshd
mv /usr/lib/systemd/system/sshd* /usr/local/src/openssh_bk/
//编译安装
cd /usr/local/src/
tar -zxf openssh-9.0p1.tar.gz
cd openssh-9.0p1
./configure --prefix=/usr/local/openssh --sysconfdir=/etc/ssh --with-pam --with-ssl-dir=/usr/local/openssl
make
make install
cp -arf /usr/local/openssh/sbin/* /usr/sbin/
cp -arf /usr/local/openssh/bin/* /usr/bin/
cp -arf /usr/local/src/openssh-9.0p1/contrib/redhat/sshd.init /etc/init.d/sshd
vim /etc/ssh/sshd_config
echo "PubkeyAcceptedKeyTypes=+ssh-rsa" >>/etc/ssh/sshd_config
