CentOS openssh 更新教程

安裝關聯軟體包和編譯工具包

yum update openssl openssh -y
yum install vim gcc gcc-c++ glibc make autoconf openssl-devel pcre-devel pam-devel zlib-devel rsync -y
yum install pam* zlib* -y           

下載下傳源碼安裝包

mkdir -p /opt/openssh || cd /opt/openssh
wget https://openbsd.hk/pub/OpenBSD/OpenSSH/portable/openssh-8.7p1.tar.gz           

源碼編譯

cd /opt/openssh && tar -zxvf openssh-8.7p1.tar.gz && cd /opt/openssh/openssh-8.7p1
mv /etc/ssh /etc/ssh_bak
./configure --prefix=/usr/local/openssh --sysconfdir=/etc/ssh --with-md5-passwords --with-zlib --with-pam
make
# 先解除安裝openssh再執行 make install
rpm -e --nodeps `rpm -qa | grep openssh`
make install           

修改配置檔案

echo "
Protocol 2
SyslogFacility AUTHPRIV
PermitRootLogin yes
PasswordAuthentication yes
ChallengeResponseAuthentication no
# UseLogin no
X11Forwarding yes
# 開啟公鑰驗證
PubkeyAuthentication yes
" >> /etc/ssh/sshd_config           

修改啟動腳本和開機啟動

# 拷貝啟動腳本
rsync -avb ./contrib/redhat/sshd.init /etc/init.d/sshd
rsync -avb ./contrib/redhat/sshd.pam /etc/pam.d/sshd.pam
chmod +x /etc/init.d/sshd

## 添加開機啟動
chkconfig sshd on           

複制可執行檔案并重新啟動服務

rsync -avb /usr/local/openssh/bin/* /usr/bin/
rsync -avb /usr/local/openssh/sbin/* /usr/sbin/

/etc/init.d/sshd restart