CentOS7升級OpenSSH

一、下載相關依賴包

[root@Log ~]# yum install -y gcc openssl-devel pam-devel rpm-build

二、下載安裝包

wget http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.8p1.tar.gz

三、卸載原Openssh

[root@Log ~]# rpm -qa |grep  openssh
openssh-clients-7.4p1-16.el7.x86_64
openssh-7.4p1-16.el7.x86_64
openssh-server-7.4p1-16.el7.x86_64
[root@Log ~]# for i in $(rpm -qa |grep openssh);do rpm -e $i --nodeps;done
[root@Log ~]#

四、解壓openssh安裝包

[root@Log ~]# tar -zxvf openssh-7.8p1.tar.gz
[root@Log ~]# cd openssh-7.8p1

五、編譯安裝

[root@Log ~]# ./configure --prefix=/usr --sysconfdir=/etc/ssh --with-md5-passwords--with-pam --with-tcp-wrappers  --with-ssl-dir=/usr/local/ssl --without-hardening
[root@Log ~]# rm -rf /etc/ssh
[root@Log ~]# make && make install

六、安裝完成，執行配置

[root@Log openssh-7.8p1]# cp contrib/redhat/sshd.init /etc/init.d/sshd
[root@Log openssh-7.8p1]# chkconfig --add sshd
[root@Log openssh-7.8p1]# chkconfig sshd on
[root@Log openssh-7.8p1]# chkconfig --list|grep sshd
[root@Log openssh-7.8p1]# sed -i "32a PermitRootLogin yes" /etc/ssh/sshd_config
[root@Log openssh-7.8p1]# systemctl restart sshd

七、查看版本

[root@Log openssh-7.8p1]# systemctl status sshd
● sshd.service - SYSV: OpenSSH server daemon
   Loaded: loaded (/etc/rc.d/init.d/sshd; bad; vendor preset: enabled)
   Active: active (running) since Wed 2018-09-12 16:29:54 CST; 8s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 1780 ExecStart=/etc/rc.d/init.d/sshd start (code=exited, status=0/SUCCESS)
 Main PID: 1786 (sshd)
   CGroup: /system.slice/sshd.service
           └─1786 /usr/sbin/sshd

Sep 12 16:29:54 Log-elasticsearch-nginx systemd[1]: Starting SYSV: OpenSSH server daemon...
Sep 12 16:29:54 Log-elasticsearch-nginx sshd[1786]: Server listening on 0.0.0.0 port 22.
Sep 12 16:29:54 Log-elasticsearch-nginx sshd[1786]: Server listening on :: port 22.
Sep 12 16:29:54 Log-elasticsearch-nginx sshd[1780]: Starting sshd:[  OK  ]
Sep 12 16:29:54 Log-elasticsearch-nginx systemd[1]: Started SYSV: OpenSSH server daemon.
[root@Log openssh-7.8p1]# ssh -V
OpenSSH_7.8p1, OpenSSL 1.0.2k-fips  26 Jan 2017
[root@Log openssh-7.8p1]#

八、注意安裝升級openssh時須要關閉SELinux，不然退出後沒法登錄

臨時關閉：setenforce 0
永久關閉：sed -i 's/enforcing/disabled/g' /etc/sysconfig/selinux