Linux编译安装OpenSSH

OpenSSH是一款开源的安全远程登陆工具，也是Linux系统中最常用的服务之一，近年来频繁爆出高危漏洞，深受各大企业关注。掌握升级OpenSSH或许是每位运维人员必经的成长阶段，今天给大家分享升级OpenSSH的通用方法，希望能帮助刚入门的Linux运维朋友们。

实验环境

操作系统：RHEL 6.10

OpenSSH：8.0p1

OpenSSL：1.0.2s

Zlib：1.2.11

第一步安装依赖软件

第二步编译安装Zlib

[root@wanghualang ~]# cd /usr/local/src/
[root@wanghualang src]# wget --no-check-certificate http://zlib.net/zlib-1.2.11.tar.gz
[root@wanghualang src]# tar xzf zlib-1.2.11.tar.gz
[root@wanghualang src]# cd zlib-1.2.11
[root@wanghualang zlib-1.2.11]# ./configure --prefix=/usr/local/zlib-1.2.11
[root@wanghualang zlib-1.2.11]# make
[root@wanghualang zlib-1.2.11]# make install

第三步编译安装OpenSSL

[root@wanghualang ~]# cd /usr/local/src/
[root@wanghualang src]# wget --no-check-certificate https://www.openssl.org/source/openssl-1.0.2s.tar.gz
[root@wanghualang src]# tar xzf openssl-1.0.2s.tar.gz
[root@wanghualang openssl-1.0.2s]# ./config \
--prefix=/usr/local/openssl-1.0.2s \
--openssldir=/usr/local/openssl-1.0.2s/ssl -fPIC
[root@wanghualang openssl-1.0.2s]# make
[root@wanghualang openssl-1.0.2s]# make install

第四步编译安装OpenSSH

[root@wanghualang ~]# cd /usr/local/src/
[root@wanghualang src]# wget --no-check-certificate https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.0p1.tar.gz
[root@wanghualang src]# tar xzf openssh-8.0p1.tar.gz
[root@wanghualang src]# cd openssh-8.0p1
[root@wanghualang openssh-8.0p1]# ./configure \
--prefix=/usr \
--sysconfdir=/etc/ssh \
--with-ssl-dir=/usr/local/openssl-1.0.2s \
--with-zlib=/usr/local/zlib-1.2.11 \
--with-pam \
--with-md5-passwords
[root@wanghualang openssh-8.0p1]# make
[root@wanghualang openssh-8.0p1]# make install

第五步配置OpenSSH（可选）

[root@wanghualang ~]# sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/' /etc/ssh/sshd_config
[root@wanghualang ~]# sed -i 's/#X11Forwarding no/X11Forwarding yes/' /etc/ssh/sshd_config
[root@wanghualang ~]# sed -i 's/#PrintMotd yes/PrintMotd no/' /etc/ssh/sshd_config
[root@wanghualang ~]# sed -i 's/#PrintLastLog yes/PrintLastLog no/' /etc/ssh/sshd_config
[root@wanghualang ~]# sed -i 's/#UseDNS no/UseDNS no/' /etc/ssh/sshd_config

第六步启动OpenSSH

[root@wanghualang ~]# cp -rf /usr/local/src/openssh-8.0p1/contrib/redhat/sshd.init /etc/init.d/sshd
[root@wanghualang ~]# cp -rf /usr/local/src/openssh-8.0p1/contrib/redhat/sshd.pam /etc/pam.d/sshd
[root@wanghualang ~]# chmod +x /etc/init.d/sshd
[root@wanghualang ~]# chkconfig --add sshd
[root@wanghualang ~]# chkconfig sshd on
[root@wanghualang ~]# service sshd start