Centos7升级openssl-3.2.0和openssh-9.6p1笔记和软件

CentOS-7.6的openssh版本升级至 openssh-9.6p1、openssl版本升级至openssl-3.2.0,需要先升级openssl再升级openssh 以下操作在root用户下使用 #挂载本地yum mkdir /mnt/aaa mount /data/openssh_update9.6p1/CentOS-7-x86_64-DVD-2009.iso /mnt/aaa cd /etc/yum.repos.d mkdir bak mv *.repo bak/ vi /etc/yum.repos.d/local.repo [centosplus] name=local baseurl=file:///mnt/aaa/ gpgcheck=0 enabled=1 yum clean all yum list #上传升级包 mkdir /data/openssh_update9.6p1 cd /data/openssh_update9.6p1 上传openssh-9.6p1.tar.gz、openssl-3.2.0.tar.gz包 tar -zxvf openssh-9.6p1.tar.gz tar -zxvf openssl-3.2.0.tar.gz #安装telnet yum install telnet* -y systemctl start telnet.socket systemctl enable telnet.socket mv /etc/securetty /etc/securetty.bak #备份:依赖库 cp /usr/lib64/libcrypto.so.10 /usr/lib64/libcrypto.so.10.old cp /usr/lib64/libcrypto.so.1.0.2k /usr/lib64/libcrypto.so.1.0.2k.old cp /usr/lib64/libssl.so.10 /usr/lib64/libssl.so.10.old cp /usr/lib64/libssl.so.1.0.2k /usr/lib64/libssl.so.1.0.2k.old #安装编译环境 yum install -y gcc* zlib-devel openssl-devel pam-devel openssl perl perl-IPC-Cmd #卸载openssl openssl version #输出结果为OpenSSL 1.0.2k-fips 26 Jan 2017 whereis openssl #输出结果为openssl: /usr/lib64/openssl /usr/include/openssl mv /usr/bin/openssl /usr/bin/openssl.old mv /etc/ssl /etc/ssl.old mv /usr/lib64/openssl /usr/lib64/openssl.old yum remove openssl #安装openssl cd /data/openssh_update9.6p1/openssl-3.2.0/ ./config --prefix=/usr make && make install whereis openssl #输出结果为openssl: /usr/bin/openssl /usr/lib64/openssl.old /usr/include/openssl /usr/share/man/man1/openssl.1ossl openssl version #输出结果为OpenSSL 3.2.0 23 Nov 2023 (Library: OpenSSL 3.2.0 23 Nov 2023) #备份ssh mv /etc/ssh /etc/ssh.bak mv /usr/bin/ssh /usr/bin/ssh.bak mv /usr/sbin/sshd /usr/sbin/sshd.bak mv /etc/pam.d/sshd /etc/pam.d/sshd.bak #卸载openssh rpm -qa|grep openssh yum remove openssh #安装openssh cd /data/openssh_update9.6p1/openssh-9.6p1 ./configure --prefix=/usr/ --sysconfdir=/etc/ssh --with-zlib --with-md5-passwords --with-pam -with-ssl-dir=/usr/local/lib64 #开始make make #如果make执行失败可以使用make clean #开始make install make install cp contrib/redhat/sshd.init /etc/init.d/sshd cp contrib/redhat/sshd.pam /etc/pam.d/sshd.pam echo "KexAlgorithms +diffie-hellman-group1-sha1">>/etc/ssh/sshd_config echo "PermitRootLogin yes">>/etc/ssh/sshd_config echo "PubkeyAuthentication yes">>/etc/ssh/sshd_config chkconfig sshd on chkconfig --add sshd systemctl enable sshd systemctl restart sshd ssh -V #输出结果为OpenSSH_9.6p1, OpenSSL 3.2.0 23 Nov 2023 #看情况是否删除安装包 cd /data/openssh_update9.6p1 rm -rf openssl-3.2.0 openssh-9.6p1 etc_OpenSSH_7.4p1_sshbk