CentOS 5.5下升级OpenSSH-4.3p2到5.6p1
1、通过Filezilla上传需要的相关软件
|
上传至/usr/local/src目录，查看： [[email protected] ~]# cd /usr/local/src [[email protected] src]# ls [[email protected] src]# ls openssh-5.6p1.tar.gz openssl-1.0.0c.tar.gz zlib-1.2.5.tar.gz [[email protected] src]# |
|
[[email protected] ~]# ssh -v OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 usage: ssh [-1246AaCfgkMNnqsTtVvXxY] [-b bind_address] [-c cipher_spec] [-D [bind_address:]port] [-e escape_char] [-F configfile] [-i identity_file] [-L [bind_address:]port:host:hostport] [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port] [-R [bind_address:]port:host:hostport] [-S ctl_path] [-w tunnel:tunnel] [[email protected]]hostname [command] |
|
注意： 安装之前确保已经装有gcc、gcc-c++库 [[email protected] src]# rpm -qa gcc [[email protected] src]# rpm -qa gcc-c++ 如果没有安装可以用yum直接联网安装： [[email protected] src]# yum -y install gcc [[email protected] src]# yum -y install gcc-c++ |
|
确保已经安装了gcc和gcc-c++库后，开始安装zlib-1.2.5 [[email protected] zlib-1.2.5]# vi /etc/ld.so.conf #配置库文件搜索路径 |
| [[email protected] src]# tar -zxvf openssl-1.0.0c.tar.gz [[email protected] src]# cd openssl-1.0.0c [[email protected] openssl-1.0.0c]# ./config shared zlib-dynamic --prefix=/usr/local/openssl-1.0.0c --with-zlib-lib=/usr/local/zlib-1.2.5/lib --with-zlib-include=/usr/local/zlib-1.2.5/include [[email protected] openssl-1.0.0c]# make [[email protected] openssl-1.0.0c]# make test (这一步是进行 SSL 加密协议的完整测试，如果出现错误就要一定先找出原因，否则可能导致SSH不能用) [[email protected] openssl-1.0.0c]# make install [[email protected] openssl-1.0.0c]# vi /etc/ld.so.conf #配置库文件搜索路径 增加下列一行 /usr/local/openssl-1.0.0c/lib #64位OS 没有生成lib目录，是lib64目录 [[email protected] openssl-1.0.0c]# ldconfig -v #刷新缓存文件/etc/ld.so.cache [[email protected] openssl-1.0.0c]# vi /etc/profile #将新的ssl加入PATH变量中 增加下列两行 PATH=/usr/local/openssl/bin:$PATH export PATH 保存、退出 [[email protected] openssl-1.0.0c]# find / -name openssl #查找openssl所在系统位置 /usr/lib/openssl #旧的 /usr/local/openssl-1.0.0c/include/openssl #新的 /usr/local/openssl-1.0.0c/bin/openssl #新的 /usr/bin/openssl #旧的 接下来开始替换系统原来的SSL [[email protected] openssl-1.0.0c]# cp -R /usr/bin/openssl /usr/bin/oldopenssl [[email protected] openssl-1.0.0c]# cp -R /usr/lib/openssl /usr/lib/oldopenssl [[email protected] openssl-1.0.0c]# rm -rf /usr/lib/libcrypto.so [[email protected] openssl-1.0.0c]# rm -rf /usr/lib/libssl.so [[email protected] openssl-1.0.0c]# ln -s /usr/local/openssl-1.0.0c/lib/libcrypto.so.1.0.0 /usr/lib/libcrypto.so [[email protected] openssl-1.0.0c]# ln -s /usr/local/openssl-1.0.0c/lib/libssl.so.1.0.0 /usr/lib/libssl.so [[email protected] openssl-1.0.0c]# cp -r /usr/local/openssl-1.0.0c/lib/* /usr/lib/openssl [[email protected] openssl-1.0.0c]# echo /usr/local/openssl-1.0.0c/lib >> /etc/ld.so.conf [[email protected] openssl-1.0.0c]# ldconfig -v [[email protected] openssl-1.0.0c]# openssl version -v #查看openssl的新版本号 OpenSSL 1.0.0c 2 Dec 2010 |
| [[email protected] openssl-1.0.0c]# rpm -qa openssh openssh-4.3p2-41.el5 [[email protected] openssl-1.0.0c]# rpm -e openssh-4.3p2-41.el5 error: Failed dependencies: openssh = 4.3p2-41.el5 is needed by (installed) openssh-clients-4.3p2-41.el5.i386 openssh = 4.3p2-41.el5 is needed by (installed) openssh-server-4.3p2-41.el5.i386 openssh = 4.3p2-41.el5 is needed by (installed) openssh-askpass-4.3p2-41.el5.i386 [[email protected] openssl-1.0.0c]# rpm -e openssh-askpass-4.3p2-41.el5.i386 [[email protected] openssl-1.0.0c]# rpm -e openssh-server-4.3p2-41.el5.i386 [[email protected] openssl-1.0.0c]# rpm -e openssh-clients-4.3p2-41.el5.i386 [[email protected] openssl-1.0.0c]# rpm -e openssh-4.3p2-41.el |
|
[[email protected] src]# tar -zxvf openssh-5.6p1.tar.gz [[email protected] src]# cd openssh-5.6p1 [[email protected] openssh-5.6p1]# ./configure --prefix=/usr --sysconfdir=/etc/ssh --with-pam --with-ssl-dir=/usr/local/openssl-1.0.0c --with-md5-passwords --mandir=/usr/share/man --with-zlib=/usr/local/zlib-1.2.5 --without-openssl-header-check 出现：configure: error: PAM headers not found 错误 说明系统中没有安装pam-devel RPM 包，找到安装光盘，安装pam-devel或者用yum直接安装 [[email protected] openssh-5.6p1]# yum -y install pam* 安装完PAM相关包后，再重新编译 [[email protected] openssh-5.6p1]# ./configure --prefix=/usr --sysconfdir=/etc/ssh --with-pam --with-ssl-dir=/usr/local/openssl-1.0.0c --with-md5-passwords --mandir=/usr/share/man --with-zlib=/usr/local/zlib-1.2.5 --without-openssl-header-check [[email protected] openssh-5.6p1]# make [[email protected] openssh-5.6p1]# make install [[email protected] openssh-5.6p1]# cp contrib/redhat/sshd.init /etc/init.d/sshd [[email protected] openssh-5.6p1]# chmod +x /etc/init.d/sshd [[email protected] openssh-5.6p1]# chkconfig --add sshd [[email protected] openssh-5.6p1]# service sshd start 正在启动 sshd：WARNING: initlog is deprecated and will be removed in a future release [确定] 这时出现“WARNING: initlog is deprecated and will be removed in a future release ”错误，可能是前面编译安装ssh在启动服务的时候没有更改文件路径，解决方法是：编辑/etc/init.d/sshd
然后再重新启动sshd服务，正常 [[email protected] openssh-5.6p1]# /etc/init.d/sshd restart 停止 sshd：[确定] 正在启动 sshd：[确定] 最后使用ssh -v查看当前的SSH版本： [[email protected] openssh-5.6p1]# ssh -v OpenSSH_5.6p1, OpenSSL 1.0.0c 2 Dec 2010 usage: ssh [-1246AaCfgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec] [-D [bind_address:]port] [-e escape_char] [-F configfile] [-I pkcs11] [-i identity_file] [-L [bind_address:]port:host:hostport] [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port] [-R [bind_address:]port:host:hostport] [-S ctl_path] [-W host:port] [-w local_tun[:remote_tun]] [[email protected]]hostname [command] OK，升级完成。 |
转载于:https://blog.51cto.com/300second/788560