原始碼升級SUSE openssh

 

1.check old openssl
rpm -q openssl
openssl version
which openssl
whereis openssl
ls /etc/ssl

2、backup old openssl
mkdir /home/ssl_bak
mv /usr/bin/openssl /home/ssl_bak
mv /etc/ssl /home/ssl_bak/etc_ssl
mv /usr/include/openssl /home/ssl_bak/include_openssl

3、install
1)zlib
cd /usr/local/src
tar -zxvf zlib-1.2.11.tar.gz
cd zlib-1.2.11
./configure
make
make install

ll /usr/local/openssl
ls /usr/local/openssl/{bin,include,lib}

2)openssl
cd /usr/local/src
tar -zvxf openssl-1.0.2m.tar.gz
cd openssl
./config --prefix=/usr/local/openssl --openssldir=/etc/ssl shared
make 
make install

ll /usr/local/openssl/{bin,include,lib}
ll /etc/ssl/

4.configure & upgrade opensll
ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/openssl/include/openssl /usr/include/openssl

vi /etc/ld.so.conf
/usr/local/lib64
/opt/kde3/lib64
--add the following line
/usr/local/openssl/lib
:wq

ldconfig

/usr/bin/openssl version -a

5.uninstall old openssh
service sshd stop
rpm -qa|grep openssh
rpm -e openssh --nodeps

6.upgrade openssh
cd /usr/local/src
tar -zxvf openssh-7.6p1.tar.gz
cd openssh

./configure --prefix=/usr --sysconfdir=/etc/ssh --with-openssl --with-md5-passwords --mandir=/usr/share/man --with-zlib --with-ssl-engine --with-ssl-dir=/usr/local/openssl
make 
make install

ssh -V

7.setting up sshd service autostart
cd /usr/local/openssh/contrib
cp suse/rc.sshd /etc/init.d/sshd
chmod 755 /etc/init.d/sshd

chkconfig --add sshd
chkconfig sshd on

vi /etc/ssh/sshd_config
--add/modify the following line
PermitRootLogin yes

--uncomment the following line
PasswordAuthentication yes
:wq