redhat 6.8 openssh升级

1、介质下载，并上传至/tmp目录下
链接：https://pan.baidu.com/s/1wQx53ZpaPi_FLno37TFGLA
提取码：yu9h
链接：https://pan.baidu.com/s/1i08tHWWHPtOf1-0v84-VQg
提取码：mmrc

cd /tmp
2、安装编译工具包
yum -y install pam-devel zlib-devel
#本系统为rac环境gcc已安装

3、升级openssl
A\备份openssl
find / -name openssl

mv /usr/lib64/openssl /usr/lib64/openssl.old
mv /usr/bin/openssl /usr/bin/openssl.old
mv /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/openssl.old
mv /usr/include/openssl /usr/include/openssl.old

如下两个库文件必须先备份，因系统内部分工具（如yum、wget等）依赖此库，而新版OpenSSL不包含这两个库
cp /usr/lib64/libcrypto.so.10 /usr/lib64/libcrypto.so.10.old
cp /usr/lib64/libssl.so.10 /usr/lib64/libssl.so.10.old

B\卸载openssl
rpm -qa | grep openssl

rpm -e --nodeps openssl-1.0.1e-48.el6.x86_64

C\源码安装
ls
tar -zxvf openssl-1.0.2k.tar.gz
cd openssl-1.0.2k
./config --prefix=/usr --openssldir=/etc/ssl --shared zlib
make
make test
make install
openssl version -a

mv /usr/lib64/libcrypto.so.10.old /usr/lib64/libcrypto.so.10
mv /usr/lib64/libssl.so.10.old /usr/lib64/libssl.so.10

4、升级openssh

mv /etc/ssh /etc/ssh.old

rpm -qa | grep openssh
rpm -e --nodeps openssh-askpass-5.3p1-117.el6.x86_64
rpm -e --nodeps openssh-5.3p1-117.el6.x86_64
rpm -e --nodeps openssh-clients-5.3p1-117.el6.x86_64
rpm -e --nodeps openssh-server-5.3p1-117.el6.x86_64
rpm -qa | grep openssh

install -v -m700 -d /var/lib/sshd
chown -v root:sys /var/lib/sshd
groupadd -g 50 sshd
useradd -c ‘sshd PrivSep’ -d /var/lib/sshd -g sshd -s /bin/false -u 50 sshd
cd …
ls
tar -zxvf openssh-7.4p1.tar.gz
cd openssh-7.4p1
./configure --prefix=/usr --sysconfdir=/etc/ssh --with-md5-passwords --with-pam --with-zlib–with-openssl-includes=/usr --with-privsep-path=/var/lib/sshd
make && make install

install -v -m755 contrib/ssh-copy-id /usr/bin
install -v -m644 contrib/ssh-copy-id.1 /usr/share/man/man1
install -v -m755 -d /usr/share/doc/openssh-7.4p1
install -v -m644 INSTALL LICENCE OVERVIEW README* /usr/share/doc/openssh-7.4p1
ssh -V

echo ‘X11Forwarding yes’ >> /etc/ssh/sshd_config
echo “PermitRootLogin yes” >> /etc/ssh/sshd_config
echo “Allowusers root oracle grid” >>/etc/ssh/sshd_config
echo “PasswordAuthentication yes” >>/etc/ssh/sshd_config

cp -p contrib/redhat/sshd.init /etc/init.d/sshd
chmod +x /etc/init.d/sshd
chkconfig --add sshd
chkconfig sshd on
chkconfig --list sshd

ssh_host_key/ssh_host_key.pub文件，导致脚本服务报错，那么可以到启动服务脚本/etc/init.d/sshd文件中注释掉如下一行

**下边的命令输入后，服务会关闭，不会启动。需要其他方式登录系统如telnet、idrac、IMM、console等方式都行
service sshd restart