ubuntu16.04源码安装openssh-7.9 openssl-1.1.1

卸载旧版openssh openssl

apt purge openssh-server
apt purge openssh-client
apt purge openssl

查看是否删除

openssl version
ssh -V
sshd -v

从官网下载相应的包文件,包括 zlib openssl openssh

openssh 下载地址

wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.9p1.tar.gz

openssl 下载地址

wget https://www.openssl.org/source/openssl-1.1.1.tar.gz

zlib 下载地址

wget http://www.zlib.net/zlib-1.2.11.tar.gz

解压下载的包文件,我是默认解压在root目录下

tar xf zlib-1.2.11.tar.gz 
tar xf openssl-1.1.1.tar.gz
tar xf openssh-7.9p1.tar.gz

首先安装zlib

cd zlib-1.2.11
./configure –prefix=/usr/local/zlib
make && make install 
make clean
./configure –shared
make test 
make install
ln -s /usr/local/zlib/lib/* /usr/lib
cp /root/zlib-1.2.11/zutil.h /usr/include
cp /root/zlib-1.2.11/zutil.c /usr/include

然后安装openssl

cd openssl-1.1.1
./config shared zlib –prefix=/usr/local/openssl –openssldir=/usr/local/openssl/ssl
make 
make test
make install
cp /usr/local/openssl/bin/* /usr/bin
ln -s /usr/local/openssl/lib/libssl.so.1.1 /usr/lib
ln -s /usr/local/openssl/lib/libcrypto.so.1.1 /usr/lib
vim /etc/ld.so.conf.d/libc.conf

修改libc.conf为

# libc default configuration
/usr/local/lib
/usr/lib
/usr/local/openssl/lib

查看是否安装成功

ldd /usr/local/openssl/bin/openssl
openssl version

最后安装openssh

cd /root/openssh-7.9p1
mkdir -p /var/empty
chown 0:0 /var/empty
chmod 000 /var/empty
groupadd sshd
useradd -g sshd -c ‘sshd privsep’ -d /var/empty -s /bin/false sshd 
./configure –prefix=/usr/local/openssh –sysconfdir=/usr/local/etc –with-zlib –with-md5-passwords –with-ssl-dir=/usr/local/openssl
make && make install 
cp /usr/local/openssh/bin/* /usr/bin
cp /usr/local/openssh/sbin/* /usr/sbin

设置开机启动

vim /etc/rc.local

#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.

/usr/local/openssh/sbin/sshd
exit 0

启动sshd

/usr/local/openssh/sbin/sshd

查看是否正常开启

netstat -antp | grep 22