Centos7 openssh升级9.9P2笔记

git clone https://github.com/openssl/openssl.git
cd openssl
./Configure
make && make install
openssl version


wget http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.9p2.tar.gz
tar -xzf openssh-9.9p2.tar.gz
cd openssh-9.9p2
ssh -V


systemctl start telnet.socket
useradd g2025
passwd g2025

mkdir -p /bak/ssh
cp -ra /etc/ssh/sshd_config /bak/ssh/
cp -ra /etc/pam.d/sshd /bak/ssh/
cd ~


rpm -e --nodeps `rpm -qa | grep openssh`
rpm -qa  openssh
chmod 600 /etc/ssh/ssh_host_rsa_key /etc/ssh/ssh_host_ecdsa_key /etc/ssh/ssh_host_ed25519_key
cd openssh-9.9p2

./configure --prefix=/usr/local/openssh --exec-prefix=/usr --sysconfdir=/etc/ssh --with-md5-passwords --with-pam --with-zlib --with-selinux --with-tcp-wrappers --with-ssl-dir=/usr/local --without-hardening --without-openssl-header-check

make && make install
cp contrib/redhat/sshd.init /etc/init.d/sshd
chmod u+x /etc/init.d/sshd
cp -ar /bak/ssh/sshd_config /etc/ssh/
cp -ar /bak/ssh/sshd /etc/pam.d/

mv /root/openssh-9.9p2 /usr/local/openssh/
vim /etc/ssh/sshd_config

sshd -t
chkconfig --add sshd
chkconfig sshd on
systemctl restart sshd
ssh -V

netstat -tulnp

Centos7 openssh升级9.9P2

本文摘要： 该文档记录了OpenSSH 9.9p2的完整安装配置过程。主要步骤包括：1)编译安装OpenSSL作为依赖；2)下载解压OpenSSH源码；3)备份原SSH配置；4)卸载旧版OpenSSH；5)配置编译参数并安装新版；6)恢复备份配置；7)设置服务启动项；8)验证配置并重启服务。整个过程涉及权限设置、密钥管理、PAM集成等安全配置，最终通过版本检查和端口监听确认安装成功。文档提供了完整的命令行操作序列，适合系统管理员参考执行