centos 7 源码安装openssh 8.3
<p>环境：centos 7.1.1503 最小化安装</p><p>依赖包下载： yum -y install lrzsz zlib-devel perl gcc pam-devel</p>
<h2>1、安装openssl ，选用最新发布的版本：openssl-1.1.1g.tar.gz</h2>
<p>1）openssl下载地址：https://www.openssl.org/source/openssl-1.1.1g.tar.gz</p>
<p><span style="color: rgba(255, 0, 0, 1)">2）卸载系统预装的openssl ，这一步可以不做</span></p>
<p>rpm -qa | grep openssl | grep -v lib</p>
<p>yum -y remove openssl-1.0.1e-42.el7.x86_64</p>
<p><img src="https://img2020.cnblogs.com/blog/1619244/202006/1619244-20200605094755738-1381709289.png" alt=""></p>
<p> </p>
<p>3）安装步骤：</p>
<p>tar -zxvf openssl-1.1.1g.tar.gz</p>
<p>cd openssl-1.1.1g</p>
<p>./config --prefix=/usr/local/openssl --openssldir=/usr/local/openssl -Wl,-rpath,/usr/local/openssl/lib shared</p>
<p>make && make install</p>
<p>4）创建软链接</p>
<p>ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl</p>
<p>ln -s /usr/local/openssl/include/openssl /usr/include/openssl</p>
<p>5）更新系统配置</p>
<p>echo "/usr/local/openssl/lib" >> /etc/ld.so.conf</p>
<p>/sbin/ldconfig</p>
<p>6）检查版本</p>
<p>openssl version</p>
<p><img src="https://img2020.cnblogs.com/blog/1619244/202006/1619244-20200605100942069-1852924811.png" alt=""></p>
<p> </p>
<h2>2、安装openssh，选用最新发布的版本：openssh-8.3p1.tar.gz</h2>
<p>1）openssh下载地址：https://openbsd.hk/pub/OpenBSD/OpenSSH/portable/openssh-8.3p1.tar.gz</p>
<p><span style="background-color: rgba(255, 255, 255, 1); color: rgba(0, 0, 0, 1)">2）卸载系统预装的openssh</span></p>
<p><span style="background-color: rgba(255, 255, 255, 1)">rpm -qa | grep openssh</span></p>
<p><span style="background-color: rgba(255, 255, 255, 1)">yum -y remove openssh-server-6.6.1p1-11.el7.x86_64 openssh-clients-6.6.1p1-11.el7.x86_64 openssh-6.6.1p1-11.el7.x86_64</span></p>
<p><span style="background-color: rgba(255, 255, 255, 1)"><img src="https://img2020.cnblogs.com/blog/1619244/202006/1619244-20200605100220653-525078235.png" alt=""></span></p>
<p> </p>
<p><span style="color: rgba(255, 0, 0, 1)"> 3）备份openssh配置文件，这一步可以不做</span></p>
<p>cp -r /etc/ssh /etc/ssh.bak</p>
<p>rm -rf /etc/ssh #这一步很重要，必须做</p>
<p>4）安装步骤</p>
<p>tar -zxvf openssh-8.3p1.tar.gz</p>
<p>cd openssh-8.3p1</p>
<p>./configure --prefix=/usr/local/openssh --sysconfdir=/etc/ssh --with-openssl-includes=/usr/local/openssl/include --with-ssl-dir=/usr/local/openssl --with-zlib --with-md5-passwords --with-pam --with-ssl-engine</p>
<p>make && make install</p>
<p>5）创建软链接</p>
<p>ln -s /usr/local/openssh/sbin/sshd /usr/sbin/sshd</p>
<p>ln -s /usr/local/openssh/bin/ssh /usr/bin/ssh</p>
<p>ln -s /usr/local/openssh/bin/ssh-add /usr/bin/ssh-add</p>
<p>ln -s /usr/local/openssh/bin/ssh-keygen /usr/bin/ssh-keygen</p>
<p>ln -s /usr/local/openssh/bin/ssh-keyscan /usr/bin/ssh-keyscan</p>
<p>6）将openssh的服务脚本复制到/etc/init.d目录下</p>
<p>cp /root/openssh-8.3p1/contrib/redhat/sshd.init /etc/init.d/sshd</p>
<p>chmod u+x /etc/<span class="hljs-keyword">init.d/sshd</span></p>
<p><span style="color: rgba(255, 0, 0, 1)">备注：sshd.init 文件是存放在openssh的压缩包中，需要在解压的文件夹中查找</span></p>
<p><span style="color: rgba(0, 0, 0, 1)">7）添加sshd服务</span></p>
<p><span style="color: rgba(0, 0, 0, 1)">chkconfig --<span class="hljs-keyword">add sshd</span></span></p>
<p>8）检查openssh版本</p>
<p>ssh -V</p>
<p><img src="https://img2020.cnblogs.com/blog/1619244/202006/1619244-20200605104152804-1054964928.png" alt=""></p>
<p> </p>
<p>9）修改openssh的配置文件，允许root登录</p>
<p>vi /etc/ssh/sshd_config</p>
<p>将 #PermitRootLogin prohibit-password 修改为 PermitRootLogin yes</p>
<p><img src="https://img2020.cnblogs.com/blog/1619244/202006/1619244-20200605103828448-354022616.png" alt=""></p>
<p> </p>
<p>10）将sshd服务设为开机启动</p>
<p>chkconfig sshd on</p>
<p>11）重启sshd服务</p>
<p>systemctl daemon<span class="hljs-attribute">-reexec</span></p>
<p>systemctl restart sshd</p>
<p>12）查看sshd服务状态</p>
<p><img src="https://img2020.cnblogs.com/blog/1619244/202006/1619244-20200609161958188-1317180413.png" alt="" loading="lazy"></p>
<p> </p>
<p> </p>
<p> </p>
<p> 至此openssh服务安装完成，不放心的话可以reboot重启机器</p>
<p>参考文章</p>
<p>https://blog.csdn.net/zhang197093/article/details/79029623</p>
<p>https://blog.csdn.net/huangbaokang/article/details/89887611</p>
<p>https://blog.csdn.net/lanmo555/article/details/51907828</p><br><br>
来源：https://www.cnblogs.com/Humbleopinion/p/13048442.html
頁:
[1]