Shulou(Shulou.com)06/03 Report--

First, please enable telnet service before upgrading! Prevent the remote ssh connection from being disconnected to the server.

Prepare the following five packages, which are dependent on upgrading openssh and openssl.

The official website download address of the following package is http://hpux.connect.org.uk/hppd/packages_popular.html

Gettext-0.19.8.1-ia64-11.31.depot.gz libiconv-1.14-ia64-11.31.depot.gz

Openssh-7.4p1-ia64-11.31.depot.gz openssl-1.0.2j-ia64-11.31.depot.gz zlib-1.2.8-ia64-11.31.depot.gz

Mkdir test

Mv gettext-0.19.8.1-ia64-11.31.depot.gz libiconv-1.14-ia64-11.31.depot.gz openssh-7.4p1-ia64-11.31.depot.gz openssl-1.0.2j-ia64-11.31.depot.gz zlib-1.2.8-ia64-11.31.depot.gz

Test

Gunzip test/*gz# decompresses all the files in test.

Third, install openssl, openssh, etc.

1. Uninstall the lower version of the software first, where the gettext and zlib versions are lower than the downloaded version, and reinstall them.

Here, delete zlib and install zlib as examples:

(1) enter swremove, and then click the "Enter" key to display the interface shown in the following figure:

(2) use the space bar to select the zlib package to be deleted, and use the "Tab" key to switch to the "Actions" option. The interface shown in the following figure appears:

(3) Click the "Remove" option with the mouse, and the interface shown in the following figure appears:

(4) Click the "OK" button, execute the delete software command, and use the "Tab" key to switch between the buttons. After execution, as shown in the following figure:

(5) see that the software has been deleted. Use the "Tab" key to switch to the "Done" button, click the mouse, and the interface shown below appears:

You can see that the software has been deleted successfully!

Use the "Tab" key to switch to the "File" button, and click "Exit" to exit, as shown in the following figure:

(7) you can also check whether the software has been deleted successfully through the swlist command. As shown in the following figure:

Indicates that the software has been deleted successfully

(8) install zlib, use the swinstall-s / home/hxres/test/zlib-1.2.8-ia64-11.31.depot command, / home/hxres/test/zlib-1.2.8-ia64-11.31.depot is the path where the zlib file is located. The result of the command execution is shown in the following figure:

Note: use the gunzip command to extract the zlib-1.2.8-ia64-11.31.depot.gz file into a file with the suffix depot. This is zlib-1.2.8-ia64-11.31.depot.

Click the "Enter" key to enter the interface shown in the following figure:

(11) use the "Space" key to select the software package, then use the "Tab" key to switch to the "Actions" button, click the "Install" button, and the interface shown in the following figure appears:

Click the "OK" button to install the software! The installation is completed as shown in the following figure:

(13) Click the "Done" button, and click "Exit" in the "File" menu to exit, as shown in the following figure:

(14) use the swlist command to check whether the zlib package is installed successfully, as shown in the following figure:

From the above picture, zlib has been installed successfully!

2. Steps to install openssl

(1) delete the executed program and header file before installation, here it is typed under a different name

Mv / usr/bin/openssl / usr/bin/openssl.old

Mv / usr/include/openssl / usr/include/openssl.old

(2) install openssl

Swinstall-s / home/hxres/test/openssl-1.0.2j-ia64-11.31.depot

The interface shown in the following figure appears:

Click "Actions", and "Install" can be installed.

(4), the soft link between the main program and the header file

Ln-s / usr/local/bin/openssl / usr/bin/openssl

Ln-s / usr/local/include/openssl / usr/include/openssl

(5) install gettext, openssh and other software

Reinstall

Swinstall-s / home/hxres/test/gettext-0.19.8.1-ia64-11.31.depot

Swinstall-s / home/hxres/test/openssh-7.3p1-ia64-11.31.depot

Note: you can disable the ssh service before installing openssh and use telnet to connect to the server to install the relevant packages!

Use the / sbin/init.d/secsh stop command to deactivate the service

Libiconv is already available or up to date, so it does not need to be installed

4. After installing openssh, perform the following operations:

Cp / opt/ssh/etc/ssh_host* / usr/local/etc# back up the original configuration file

Mv / usr/sbin/sshd / usr/sbin/sshdold20161128# back up the original host program

Ln-s / usr/local/sbin/sshd / usr/sbin/sshd# newly installed programs do soft links

Mv / usr/bin/ssh / usr/bin/sshold20161128# back up the original host program

Ln-s / usr/local/bin/ssh / usr/bin/ssh# linker on the newly installed ssh main program

Modify the / usr/local/etc/sshd_config content as shown below:

Port 22

Protocol 2

ListenAddress 0.0.0.0

HostKey / usr/local/etc/ssh_host_rsa_key

HostKey / usr/local/etc/ssh_host_dsa_key

SyslogFacility AUTH

LogLevel INFO

PermitRootLogin yes

RhostsRASAuthentication no

IgnoreRhosts yes

UsePrivilegeSeparation yes

Modify the / sbin/init.d/secsh startup script: change to the following

WHAT_PATH=/usr/local/sbin/sshd

Ps-ef | grep "/ usr/local/sbin/sshd" | grep-v grep > / dev/null

Start ssh

# / sbin/init.d/secsh start

HP-UX Secure Shell started

Verify that the upgrade result of openssl and openssh is shown below: indicates that the upgrade is successful!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.