https://www.cnblogs.com/nmap/p/10779658.html
CENTOS内置的OPENSSL和OPENSSH升级更新
OPENSSH:https://openbsd.hk/pub/OpenBSD/OpenSSH/portable/
OPENSSL:https://ftp.openssl.org/source/
依赖包:
yum install -y gcc gcc-c++ glibc make autoconf openssl openssl-devel pcre-devel pam-devel
yum install -y pam* zlib*
openssl
openssl version //查看版本
step1:rz上传openssl源码包,并解压
tar -xvf openssl-1.1.1d.tar.gz
step2:备份之前的文件
mv /usr/bin/openssl /usr/bin/openssl_bak
mv /usr/include/openssl /usr/include/openssl_bak
step3:编译安装
mkdir /usr/local/ssl
./config --prefix=/usr/local/ssl shared && make && make install
echo $? //查看上一条命令是否正确执行
step4:制作软连接
ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/ssl/include/openssl /usr/include/openssl
step5:执行命令加载新配置
echo
"/usr/local/ssl/lib"
>>
/etc/ld
.so.conf
/sbin/ldconfig
openssh
ssh -V //查看版本
step1:rz上传openssh源码包,并解压
tar -xvf openssh-8.3p1.tar.gz
rm -rf /etc/ssh/*
step2:编译安装
mkdir /usr/local/openssh
.
/configure
--prefix=
/usr/local/openssh
--sysconfdir=
/etc/ssh
--with-openssl-includes=
/usr/local/ssl/include
--with-ssl-
dir
=
/usr/local/ssl
--with-zlib --with-md5-passwords --with-pam &&
make
&&
make
install
systemctl daemon-reload
法一:
/etc/init.d/sshd restart
法二:
systemctl stop sshd
systemctl start sshd
制作软连接:
mv /usr/bin/ssh /usr/bin/ssh.old
ln -s /usr/local/openssh/bin/ssh /usr/bin/ssh