Shulou(Shulou.com)06/03 Report--

Recently, as Green League continues to sweep openssh loopholes, it has decided to upgrade the HP machine and upgrade openssh to the latest.

Check the version of the device ssh, which is really low.

There is a website that provides a detailed download of HP series installation packages, including HP-UX 10.20 | HP-UX 11.00 | HP-UX 11.11 | HP-UX 11.23 | HP-UX 11.31

Website URL link http://mirrors.develooper.com/hpux/downloads.html#hpux1123

My device is HP-UX 11.23ia64 bit. Find your corresponding platform on the page.

Then download OpenSSH 6.6p1 (for openssl-1.0.1), OpenSSL 1.0.1h Zlib 1.2.8

After these three software packages are downloaded locally and uploaded to the server that needs to be upgraded, you can install the software one by one, but this is troublesome, and you can package and install these software, which is much more convenient.

1. Decompress the uploaded xx.sd.bz file:

Bash-3.2#bzip2-d openssh-6.6p1-11.23.sd.bz

Bash-3.2#bzip2-d openssl-1.0.1h-11.23.sd.bz

Bash-3.2#bzip2-d zlib-1.2.8-11.23.sd.bz

Bash-3.2#mkdir / home/test/upload/ssh/ssh7

Bash-3.2#swcopy-v-s / home/test/upload/ssh/openssl-1.0.1h-11.23.sd openssl @ / home/test/upload/ssh/ssh7 (red must be an absolute path)

Bash-3.2#swcopy-v-s / home/test/upload/ssh/zlib-1.2.8-11.23.sd zlib @ / home/test/upload/ssh/ssh7

Bash-3.2#swcopy-v-s / home/test/upload/ssh/openssh-6.6p1-11.23.sd openssh @ / home/test/upload/ssh/ssh7

After you have packaged the three software into the ssh7 folder, you are ready to install.

Some preparatory work needs to be done before starting the installation.

1. Enable the telnet service to avoid an accident in the upgrade and the device cannot be connected.

-bash-3.2#vi / etc/inetd.conf remove the # before telnet in the configuration file, and then restart the process.

-bash-3.2#

-bash-3.2# ps-ef | grep ssh

Ipnet 10151 9743 2 13:41:16 pts/2 0:00 grep ssh

Ipnet 9741 9721 0 13:33:17? 0:00 sshd: ipnet@pts/2

Root 9721 9715 0 13:33:02? 0:00 sshd: ipnet [priv]

Root 9715 1 0 13:32:45? 0:00 / opt/ssh/sbin/sshd

-bash-3.2# kill-HUP 9715

two。 Remove previously installed openssh openssl zlib

-bash-3.2#swremove (I have installed the latest version here. If it is an old version, uninstall it first, and then install the latest version)

Press the space bar to select the name of the software that needs to be uninstalled, press the Tab key, press the → key to move to Actions, and select Remove to delete the corresponding software. Finally quit.

. New installation of new version of openssh,openssl,zlib

-bash-3.2#swinstall-s / home/test/upload/ssh/ssh7 (select all of the spacebar in turn)

-bash-3.2# file / usr/local/sbin/sshd (check the digital version of sshd software)

/ usr/local/sbin/sshd: ELF-64 executable object file-IA64

-bash-3.2# ldd / usr/local/sbin/sshd

Libcrypto.so = > / usr/local/ssl/lib/libcrypto.so

Libz.so = > / usr/lib/hpux64/libz.so

Libnsl.so.1 = > / usr/lib/hpux64/libnsl.so.1

Libxnet.so.1 = > / usr/lib/hpux64/libxnet.so.1

Libsec.so.1 = > / usr/lib/hpux64/libsec.so.1

Libc.so.1 = > / usr/lib/hpux64/libc.so.1

Libxti.so.1 = > / usr/lib/hpux64/libxti.so.1

Libxti.so.1 = > / usr/lib/hpux64/libxti.so.1

Libm.so.1 = > / usr/lib/hpux64/libm.so.1

Libdl.so.1 = > / usr/lib/hpux64/libdl.so.1

* after I have done it here, I may encounter a situation where I can't find libz.so for the first time, so I can make a link at this time.

*-bash-3.2# ln-s / usr/local/lib/libz.so / usr/lib/hpux64/

4. View and stop the old ssh service

-bash-3.2# ps-ef | grep inetd

Root 22351 21699 1 15:21:27 pts/1 0:00 grep ssh

Root 21685 9715 0 15:08:23? 0:00 sshd: boco4A [priv]

Root 9715 1 0 13:32:45? 0:00 / opt/ssh/sbin/sshd

Boco4A 21687 21685 0 15:08:23? 0:00 sshd: boco4A@pts/1

-bash-3.2# kill-9 9715

5. Remove the old startup program and link the new program

-bash-3.2#mv / opt/ssh/sbin/sshd / opt/ssh/sbin/sshd_20140821

-bash-3.2#ln-s / usr/local/sbin/sshd / opt/ssh/sbin/sshd

6. Start the ssh service

-bash-3.2#/opt/ssh/sbin/sshd

7. Run ssh-keygen to generate private keys and keys

-bash-3.2#ssh-keygen-f / usr/local/etc/ssh_host_rsa_key

-bash-3.2#ssh-keygen-f / usr/local/etc/ssh_host_dsa_key

-bash-3.2#ssh-keygen-f / usr/local/etc/ssh_host_ecdsa_key

8. View ssh version

-bash-3.2#sshd-version

9. Close the telnet service and omit it here.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.