centos7离线更新openssl和openssh

centos7离线更新openssl和openssh

一、 原来环境和版本

---

centos7.2

[root@incloudos openssh-8.0p1]# uname -r
3.10.0-327.el7.x86_64
[root@incloudos openssh-8.0p1]# cat /etc/redhat-release
CentOS Linux release 7.2.1511 (Core)

openssl

[root@incloudos ~]# openssl version -a
OpenSSL 1.0.1e-fips 11 Feb 2013
built on: Mon Jun 29 12:45:07 UTC 2015
platform: linux-x86_64

openssh

[root@incloudos ~]# ssh -V
OpenSSH_6.6.1p1, OpenSSL 1.0.1e-fips 11 Feb 2013

httpd

[root@incloudos ~]# httpd -V
Server version: Apache/2.4.6 (CentOS)
Server built: Jul 18 2016 15:30:14
Server’s Module Magic Number: 20120211:24
Server loaded: APR 1.4.8, APR-UTIL 1.5.2
Compiled using: APR 1.4.8, APR-UTIL 1.5.2
Architecture: 64-bit

二、准备的包

---

离线安装包下载地址：https://download.youkuaiyun.com/download/paincupid/11225992

openssl-1.0.2s.tar.gz

openssh-8.0p1.tar.gz

pam-1.1.8-22.el7.x86_64.rpm

pam-devel-1.1.8-22.el7.x86_64.rpm

zlib-1.2.7-17.el7.x86_64.rpm

zlib-devel-1.2.7-17.el7.x86_64.rpm

telnet-0.17-64.el7.x86_64.rpm

telnet-server-0.17-64.el7.x86_64.rpm

openssl-1.0.2k-12.el7.x86_64.rpm

之所以需要低版本的openssl，是因为如果在后面卸载openssl后，无法继续操作的话，再次安装openssl，不至于造成系统无法使用。

这些包可以自己搜索一下去下载，也可以通过yumdownloader来下载。（yumdownload 是安装yum-utils后可以使用）

先在外网安装yum-utils

yum install yum-utils

例如下载pam，可以执行：

#yumdownloader pam

也可以不用安装yum-utils，可以使用下面的命令下载相关依赖包

#yum install --downloadonly --downloaddir=/root/ pam

先下载好离线包，然后复制到内网机器，准备升级。

升级openssh，先要开启telnet，确保telnet可以正常登陆。这样当openssh升级出现问题的时候，还可以通过telnet登录到服务器操作。

三、安装依赖包

---

pam, pam-devel, xinted, zlib, zlib-devel, telnet, telnet-server

安装pam

先查看是否有pam已经安装

#rpm -qa |grep pam

[root@incloudos ~]# rpm  -qa |grep pam
fprintd-pam-0.5.0-4.0.el7_0.x86_64
pam-1.1.8-12.el7_1.1.x86_64

服务器上面有pam的包。

采用rpm -U升级安装，免得rpm -e --nodeps卸载包出现问题。（而且真有可能出现问题，尤其是zlib包）

#rpm  -Uvh  pam-1.1.8-22.el7.x86_64.rpm

#rpm -Uvh  pam-devel-1.1.8-22.el7.x86_64.rpm

[root@incloudos 2pam]# rpm  -Uvh  pam-1.1.8-22.el7.x86_64.rpm
warning: pam-1.1.8-22.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY
Preparing...                          ################################# [100%]
Updating / installing...
   1:pam-1.1.8-22.el7                 ################################# [ 50%]
Cleaning up / removing...
   2:pam-1.1.8-12.el7_1.1             ################################# [100%]

[root@incloudos 3pam-devel]# rpm -Uvh  pam-devel-1.1.8-22.el7.x86_64.rpm
warning: pam-devel-1.1.8-22.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY
Preparing...                          ################################# [100%]
Updating / installing...
   1:pam-devel-1.1.8-22.el7           ################################# [100%]

安装xinted

#rpm -Uvh xinetd-2.3.15-13.el7.x86_64.rpm

[root@incloudos 4xinted]# rpm  -Uvh  xinetd-2.3.15-13.el7.x86_64.rpm
warning: xinetd-2.3.15-13.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY
Preparing...                          ################################# [100%]
Updating / installing...
   1:xinetd-2:2.3.15-13.el7           ################################# [ 50%]
Cleaning up / removing...
   2:xinetd-2:2.3.15-12.el7           ################################# [100%]

安装zlib

#rpm -Uvh zlib-1.2.7-18.el7.x86_64.rpm

#rpm -Uvh zlib-devel-1.2.7-18.el7.x86_64.rpm

[root@incloudos 5zlib]# rpm -Uvh zlib-1.2.7-18.el7.x86_64.rpm
warning: zlib-1.2.7-18.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY
Preparing...                          ################################# [100%]
Updating / installing...
   1:zlib-1.2.7-18.el7                ################################# [ 50%]
Cleaning up / removing...
   2:zlib-1.2.7-15.el7                ################################# [100%]
[root@incloudos 5zlib]# rpm -Uvh zlib-devel-1.2.7-18.el7.x86_64.rpm
warning: zlib-devel-1.2.7-18.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY
error: Failed dependencies:
        zlib-devel(x86-32) is needed by (installed) openssl-devel-1:1.0.1e-42.el7.9.i686

先用createrepo，再新建zlib-devel.repo，试用 yum install zlib-devel安装，提示

 [root@incloudos yum.repos.d]# yum install zlib-devel
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
Resolving Dependencies
--> Running transaction check
---> Package zlib-devel.x86_64 0:1.2.7-15.el7 will be updated
---> Package zlib-devel.x86_64 0:1.2.7-18.el7 will be an update
--> Finished Dependency Resolution
Error:  Multilib version problems found. This often means that the root
       cause is something else and multilib version checking