Shulou(Shulou.com)06/01 Report--

This article mainly shows you "how to upgrade the use of openssh", the content is easy to understand, clear, hope to help you solve your doubts, the following let the editor lead you to study and learn "how to upgrade the use of openssh" this article.

I. description of the environment

1) operating system: CentOS 6.464 bit

2) Openssl version: 1.0.1e-15.el6. Since upgrading to openssh_6.7p1 requires a version of OpenSSL above 0.9.8f, there is no need to upgrade openssl here. Just upgrade openssh directly.

3) pre-upgrade version of Openssh: openssh-5.3p1-94.el6 mitOpenssh version after upgrade: openssh_6.7p1 (source code installation)

4) connection tool xshell 4. To prevent time-out disconnection.

Upgrade sshd to OpenSSH-6.7 and delete the old version of ssh

1) prepare before upgrade

Download openssh-6.7p1.tar.gz

Http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-6.7p1.tar.gz

Back up the ssh configuration file:

# mv / etc/ssh / etc/ssh.bak

Check to see if the package is missing

# rpm-qa | egrep "gcc | make | perl | pam | pam-devel | zlib | zlib-devel"

If you have configured yum, you can install these packages directly with yum, so that you can check whether they are installed or not.

Yum-y install gcc* make perl pam pam-devel zlib zlib-devel

Uninstall the old version of openssh first

# rpm-e `rpm-qa | grep openssh`

Install a CentOS6.5 on the virtual machine, by the way, upgrade the openssh that comes with the system, any system operation has risks, please do a good backup in the formal environment.

1. Preparation work, corresponding package

You need to download the dependency package openssl and the zlib package.

Openssh download address: http://www.openssh.com/portable.html#http

Openssl download address: http://www.openssl.org/source/

Zlib download address: http://zlib.net/zlib-1.2.8.tar.gz

2. Uninstall the openssh that comes with the system. Stop the sshd service before uninstalling, delete it with rpm, and clear the system / etc/ssh directory at the same time.

[root@CentOS tmp] # service sshd stop

Stopping sshd: [OK]

[root@CentOS tmp] # rpm-qa openssh

Openssh-5.3p1-94.el6.x86_64

[root@CentOS tmp] # rpm-e openssh-server

[root@CentOS tmp] # rpm-e openssh-clients

[root@CentOS tmp] # rpm-e openssh-askpass

[root@CentOS tmp] # rpm-e openssh

[root@CentOS tmp] # rm-rf / etc/ssh

3. Install zlib

[root@CentOS tmp] # tar-xvf zlib-1.2.8.tar.gz

[root@CentOS tmp] # cd zlib-1.2.8

[root@CentOS zlib-1.2.8] # / configure-- prefix=/usr/local/zlib & & make & & make install

4. Install openssl

[root@CentOS tmp] # tar-xvf openssl-1.0.1i.tar.gz

[root@CentOS tmp] # cd openssl-1.0.1i

[root@CentOS openssl-1.0.1i] # / config-- prefix=/usr/local/openssl & & make & & make install

5. Install openssh

[root@CentOS tmp] # tar-xvf openssh-6.6p1.tar.gz

[root@CentOS tmp] # cd openssh-6.6p1

[root@CentOS openssh-6.6p1] # / configure-- prefix=/usr/local/openssh-- sysconfdir=/etc/ssh-- with-ssl-dir=/usr/local/openssl-- with-

Zlib=/usr/local/zlib-with-md5-passwords-without-hardening & & make & & make install

6. Modify the configuration file

[root@CentOS openssh-6.6p1] # cp contrib/redhat/sshd.init / etc/init.d/sshd

[root@CentOS openssh-6.6p1] # chmod + x / etc/init.d/sshd

[root@CentOS openssh-6.6p1] # vi / etc/init.d/sshd

Modify the installation directory of the corresponding directive

= =

25 lines SSHD=/usr/sbin/sshd is SSHD=/usr/local/openssh/sbin/sshd

Line 41 / usr/bin/ssh-keygen-An is / usr/local/openssh/bin/ssh-keygen-A

= =

Save exit

7. Join the system service

[root@CentOS openssh-6.6p1] # chkconfig-- add sshd

[root@CentOS openssh-6.6p1] # service sshd start

The above is all the contents of the article "how to upgrade openssh". Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.