基于AnolisOS 8.9升级OpenSSH9.7p1,不升级OpenSSL.
安装依赖
yum install -y gcc openssl-devel pam-devel zlib-devel make
OpenSSH下载
wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.7p1.tar.gz
tar zxf openssh-9.7p1.tar.gz
卸载旧版本OpenSSH
rpm -qa|grep openssh
openssh-clients-8.0p1-20.0.1.an8.x86_64
openssh-8.0p1-20.0.1.an8.x86_64
openssh-server-8.0p1-20.0.1.an8.x86_64
rpm -e --nodeps openssh-8.0p1-20.0.1.an8.x86_64
rpm -e --nodeps openssh-server-8.0p1-20.0.1.an8.x86_64
rpm -e --nodeps openssh-clients-8.0p1-20.0.1.an8.x86_64
OpenSSH卸载
cd openssh-9.7p1
install -v -m700 -d /var/lib/sshd
chown -v root:sys /var/lib/sshd
groupadd -g 50 sshd
useradd -c 'sshd PrivSep' \
-d /var/lib/sshd \
-g sshd \
-s /bin/false \
-u 50 sshd
./configure --prefix=/usr \
--sysconfdir=/etc/ssh \
--with-md5-passwords --with-zlib \
--with-privsep-path=/var/lib/sshd
make
chmod 600 /etc/ssh/ssh_host_rsa_key
chmod 600 /etc/ssh/ssh_host_ecdsa_key
chmod 600 /etc/ssh/ssh_host_ed25519_key
make install
ssh -V
install -v -m755 contrib/ssh-copy-id /usr/bin
install -v -m644 contrib/ssh-copy-id.1 /usr/share/man/man1
install -v -m755 -d /usr/share/doc/openssh-9.7p1
install -v -m644 INSTALL LICENCE OVERVIEW README* /usr/share/doc/openssh-9.7p1
修改sshd_config
vi /etc/ssh/sshd_config
SyslogFacility AUTHPRIV
PermitRootLogin yes
PasswordAuthentication yes
UseDNS no
重启服务
cp -p contrib/redhat/sshd.init /etc/init.d/sshd
chmod +x /etc/init.d/sshd
chkconfig --add sshd
chkconfig sshd on
chkconfig --list sshd
systemctl restart sshd
systemctl status sshd
退出并登录验证