卸载旧版openssh openssl
apt purge openssh-server apt purge openssh-client apt purge openssl
查看是否删除
openssl version ssh -V sshd -v
从官网下载相应的包文件,包括 zlib openssl openssh
openssh 下载地址
wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.9p1.tar.gz
openssl 下载地址
wget https://www.openssl.org/source/openssl-1.1.1.tar.gz
zlib 下载地址
wget http://www.zlib.net/zlib-1.2.11.tar.gz
解压下载的包文件,我是默认解压在root目录下
tar xf zlib-1.2.11.tar.gz tar xf openssl-1.1.1.tar.gz tar xf openssh-7.9p1.tar.gz
首先安装zlib
cd zlib-1.2.11 ./configure –prefix=/usr/local/zlib make && make install make clean ./configure –shared make test make install ln -s /usr/local/zlib/lib/* /usr/lib cp /root/zlib-1.2.11/zutil.h /usr/include cp /root/zlib-1.2.11/zutil.c /usr/include
然后安装openssl
cd openssl-1.1.1 ./config shared zlib –prefix=/usr/local/openssl –openssldir=/usr/local/openssl/ssl make make test make install cp /usr/local/openssl/bin/* /usr/bin ln -s /usr/local/openssl/lib/libssl.so.1.1 /usr/lib ln -s /usr/local/openssl/lib/libcrypto.so.1.1 /usr/lib vim /etc/ld.so.conf.d/libc.conf
修改libc.conf为
# libc default configuration /usr/local/lib /usr/lib /usr/local/openssl/lib
查看是否安装成功
ldd /usr/local/openssl/bin/openssl
openssl version
最后安装openssh
cd /root/openssh-7.9p1 mkdir -p /var/empty chown 0:0 /var/empty chmod 000 /var/empty groupadd sshd useradd -g sshd -c ‘sshd privsep’ -d /var/empty -s /bin/false sshd ./configure –prefix=/usr/local/openssh –sysconfdir=/usr/local/etc –with-zlib –with-md5-passwords –with-ssl-dir=/usr/local/openssl make && make install cp /usr/local/openssh/bin/* /usr/bin cp /usr/local/openssh/sbin/* /usr/sbin
设置开机启动
vim /etc/rc.local #!/bin/sh -e # # rc.local # # This script is executed at the end of each multiuser runlevel. # Make sure that the script will "exit 0" on success or any other # value on error. # # In order to enable or disable this script just change the execution # bits. # # By default this script does nothing. /usr/local/openssh/sbin/sshd exit 0
启动sshd
/usr/local/openssh/sbin/sshd
查看是否正常开启
netstat -antp | grep 22