Shulou(Shulou.com)06/02 Report--

1.check old openssl

rpm -q openssl

openssl version

which openssl

whereis openssl

ls /etc/ssl

2、backup old openssl

mkdir /home/ssl_bak

mv /usr/bin/openssl /home/ssl_bak

mv /etc/ssl /home/ssl_bak/etc_ssl

mv /usr/include/openssl /home/ssl_bak/include_openssl

3、install

1)zlib

cd /usr/local/src

tar -zxvf zlib-1.2.11.tar.gz

cd zlib-1.2.11

./ configure

make

make install

ll /usr/local/openssl

ls /usr/local/openssl/{bin,include,lib}

2)openssl

cd /usr/local/src

tar -zvxf openssl-1.0.2m.tar.gz

cd openssl

./ config --prefix=/usr/local/openssl --openssldir=/etc/ssl shared

make

make install

ll /usr/local/openssl/{bin,include,lib}

ll /etc/ssl/

4.configure & upgrade opensll

ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl

ln -s /usr/local/openssl/include/openssl /usr/include/openssl

vi /etc/ld.so.conf

/usr/local/lib64

/opt/kde3/lib64

--add the following line

/usr/local/openssl/lib

:wq

ldconfig

/usr/bin/openssl version -a

5.uninstall old openssh

service sshd stop

rpm -qa|grep openssh

rpm -e openssh --nodeps

6.upgrade openssh

cd /usr/local/src

tar -zxvf openssh-7.6p1.tar.gz

cd openssh

./ configure --prefix=/usr --sysconfdir=/etc/ssh --with-openssl --with-md5-passwords --mandir=/usr/share/man --with-zlib --with-ssl-engine --with-ssl-dir=/usr/local/openssl

make

make install

ssh -V

7.setting up sshd service autostart

cd /usr/local/openssh/contrib

cp suse/rc.sshd /etc/init.d/sshd

chmod 755 /etc/init.d/sshd

chkconfig --add sshd

chkconfig sshd on

vi /etc/ssh/sshd_config

--add/modify the following line

PermitRootLogin yes

--uncomment the following line

PasswordAuthentication yes

:wq

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.