注:需要先升级openssl到1.1.1版本,openssl在/usr/local/openssl和/usr/local路径生成了2次,/usr/local/下不生成会提示ssl库找不到
openssh源码包下载网址:https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable,选择openssh-9.8p1.tar.gz
openssl源码包下载网址:https://openssl-library.org/source/old/1.1.1/index.html 随便1个1.1.1版本就行
升级openssl到1.1.1:
# tar openssl-1.1.1w.tar.gz
# cd openssl-1.1.1w
# ./config --prefix=/usr/local/openssl
# make && make install
# ./config --prefix=/usr/local/
# make && make install
# ln -s /usr/local/openssl/lib/libssl.so.1.1 /usr/lib64/
# ln -s /usr/local/openssl/lib/libcrypto.so.1.1 /usr/lib64/
# rm /usr/lib64/libssl.so
# rm /usr/lib64/libcrypto.so
# ln -s /usr/lib64/libssl.so.1.1 /usr/lib64/libssl.so
# ln -s /usr/lib64/libcrypto.so.1.1 /usr/lib64/libcrypto.so
# rm /usr/bin/openssl
# ln -s /usr/local/openssl/bin/openssl /usr/bin/
# openssl version (确保结果是1.1.1)
升级openssh到9.8:
# tar zxfv openssh-9.8p1.tar.gz
# cd openssh-9.8p1
# ./configure --prefix=/usr/local/openssh
# make && make install
# mv /usr/sbin/sshd /usr/sbin/sshd.bak
# ln -s /usr/local/openssh/sbin/sshd /usr/sbin/
# mv /etc/ssh /etc/ssh.bak
# ln -s /usr/local/openssh/etc /etc/ssh
# systemctl restart sshd
# sshd -version (确保结果是9.8)