SSH 从6.61升级到9.3

admin

######################################################

# 安装telnet

apt-get install openbsd-inetd

apt-get install telnetd

cat /etc/inetd.conf  | grep telnet

/etc/init.d/openbsd-inetd restart

# 在telnet连接下进行 需要使用另一台服务器能连接本服务器

telnet ip

# 输入账号密码

######################################################

# 停止sshd 22的端口监听服务

sudo service sshd stop

# 清除ssh配置

sudo apt purge ssh

# 卸载ssh

sudo apt-get remove openssh-server

sudo apt-get remove openssh-client

# 解压

sudo tar -xvf zlib-1.2.13.tar.gz &&\

cd zlib-1.2.13 &&\

sudo mkdir -p /usr/local/zlib-1.2.13 &&\

sudo ./configure --prefix=/usr/local/zlib-1.2.13/ &&\

sudo make &&\

sudo make install

# 备份老版 openssl (可能老版本的文件不存在，略过)

sudo mv /usr/bin/openssl /usr/bin/openssl.old &&\

sudo mv /usr/include/openssl /usr/include/openssl.old &&\

sudo mv /usr/local/openssl /usr/local/openssl.old

# 解压

sudo tar -xvf openssl-3.1.1.tar.gz &&\

cd openssl-3.1.1 &&\

sudo mkdir -p /usr/local/ssl-3.1.1 &&\

sudo ./config shared --prefix=/usr/local/ssl-3.1.1/

# 时间较长，耐心等待

sudo make test &&\

sudo make install

# 建立软连接 (注意根据自己实际路径更改)

sudo ln -s /usr/local/ssl-3.1.1/lib64/libssl.so.3 /usr/lib/libssl.so.3 &&\

sudo ln -s /usr/local/ssl-3.1.1/lib64/libcrypto.so.3 /usr/lib/libcrypto.so.3

# 解压

sudo tar -xvf openssh-9.3p1.tar.gz &&\

cd openssh-9.3p1 &&\

sudo mkdir -p /usr/local/ssh-9.3 &&\

sudo ./configure --prefix=/usr/local/ssh-9.3 --with-zlib=/usr/local/zlib-1.2.13 --with-ssl-dir=/usr/local/ssl-3.1.1 &&\

sudo make &&\

sudo make install

# 建立软连接 (注意根据自己实际路径更改)

sudo ln -s /usr/local/ssh-9.3/bin/ssh /usr/bin/ssh &&\

sudo ln -s /usr/local/ssh-9.3/bin/sftp /usr/bin/sftp &&\

sudo ln -s /usr/local/ssh-9.3/bin/scp /usr/bin/scp &&\

sudo ln -s /usr/local/ssh-9.3/bin/ssh-add /usr/bin/ssh-add &&\

sudo ln -s /usr/local/ssh-9.3/bin/ssh-agent /usr/bin/ssh-agent &&\

sudo ln -s /usr/local/ssh-9.3/bin/ssh-keygen  /usr/bin/ssh-keygen &&\

sudo ln -s /usr/local/ssh-9.3/bin/ssh-keyscan /usr/bin/ssh-keyscan &&\

sudo ln -s /usr/local/ssh-9.3/sbin/sshd /usr/bin/sshd

# sshd ssl

sudo ln -s /usr/local/ssh-9.3/sbin/sshd /usr/sbin/ &&\

sudo ln -s /usr/local/ssl-3.1.1/bin/openssl /usr/bin/openssl &&\

sudo ln -s /usr/local/ssl-3.1.1/include/openssl /usr/include/openssl

# ===================================================================================

# 验证安装 (验证版本)

ssh -V

sshd -V

openssl version -a