一、為了預(yù)防安裝出錯，打開telnet遠程登錄
apt-get install telnetd xinetd
查看狀態(tài)
service xinetd status
默認使用root賬號不能登錄
創(chuàng)建一個用戶，
adduser zhang
寫入密碼其他默認即可
添加到sudo組
adduser zhang sudo
關(guān)閉telnet遠程登錄
/etc/init.d/openbsd-inetd stop
二、升級openssh
1、安裝依賴包
apt install libzip-dev libssl-dev autoconf gcc libxml2 make
2、下載源碼文件包
cd /usr/local/src
wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.9p1.tar.gz
wget https://www.openssl.org/source/openssl-1.1.1.tar.gz --no-check-certificate
wget http://www.zlib.net/zlib-1.2.11.tar.gz
tar -zxvf openssh-7.9p1.tar.gz
tar -zxvf openssl-1.1.1.tar.gz
tar -zxvf zlib-1.2.11.tar.gz
3、編譯安裝zlib
cd zlib-1.2.11
./configure --prefix=/usr/local
make
make install
4、編譯安裝openssl
apt purge openssl
cd ../openssl-1.1.1
./config shared --prefix=/usr/local/ssl
make test
make install
ln -s /usr/local/ssl/lib/libssl.so.1.1 /usr/lib/libssl.so.1.1
ln -s /usr/local/ssl/lib/libcrypto.so.1.1 /usr/lib/libcrypto.so.1.1
5、編譯安裝openssh
service sshd stop
apt purge ssh
cd ../openssh-7.9p1
./configure --prefix=/usr/local --sysconfdir=/etc/ssh --with-ssl-dir=/usr/local/ssl
make
make install
6、設(shè)置相關(guān)配置文件
mv /usr/bin/scp /tmp/;mv /usr/bin/ssh* /tmp/
ln -s /usr/local/bin/ssh /usr/bin/ssh
ln -s /usr/local/bin/scp /usr/bin/scp
ln -s /usr/local/bin/ssh-add /usr/bin/ssh-add
ln -s /usr/local/bin/ssh-agent /usr/bin/ssh-agent
ln -s /usr/local/bin/ssh-keygen /usr/bin/ssh-keygen
ln -s /usr/local/bin/ssh-keyscan /usr/bin/ssh-keyscan
ln -s /usr/local/bin/openssl /usr/bin/openssl
ln -s /usr/local/sbin/sshd /usr/bin/sshd
7、重啟ssh服務(wù)
service sshd restart
8、查看當(dāng)前版本
ssh -V
sshd -V
openssl version -a
