注:需要先升级openssl到1.1.1版本,openssl在/usr/local/openssl和/usr/local路径生成了2次,/usr/local/下不生成会提示ssl库找不到


openssh源码包下载网址:https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable,选择openssh-9.8p1.tar.gz

openssl源码包下载网址:https://openssl-library.org/source/old/1.1.1/index.html   随便1个1.1.1版本就行


升级openssl到1.1.1:

# tar openssl-1.1.1w.tar.gz

# cd openssl-1.1.1w

# ./config --prefix=/usr/local/openssl

# make && make install

# ./config --prefix=/usr/local/

# make && make install

# ln -s /usr/local/openssl/lib/libssl.so.1.1 /usr/lib64/

# ln -s /usr/local/openssl/lib/libcrypto.so.1.1 /usr/lib64/

# rm /usr/lib64/libssl.so

# rm /usr/lib64/libcrypto.so

# ln -s /usr/lib64/libssl.so.1.1 /usr/lib64/libssl.so

# ln -s /usr/lib64/libcrypto.so.1.1 /usr/lib64/libcrypto.so

# rm /usr/bin/openssl

# ln -s /usr/local/openssl/bin/openssl /usr/bin/

# openssl version  (确保结果是1.1.1)


升级openssh到9.8:

# tar zxfv openssh-9.8p1.tar.gz

# cd openssh-9.8p1

# ./configure --prefix=/usr/local/openssh

# make && make install

# mv /usr/sbin/sshd /usr/sbin/sshd.bak

# ln -s /usr/local/openssh/sbin/sshd /usr/sbin/

# mv /etc/ssh /etc/ssh.bak

# ln -s /usr/local/openssh/etc /etc/ssh

# systemctl restart sshd

# sshd -version (确保结果是9.8)