ssh72p2升级详细步骤.docx

Openssh7.2p2升级方案OpenSSH_7.2p2、Openssl1.01g、zlib1.28??第一步准备安装包?1.1、确定操作系统?uname?-a?lsb_release?-a(suse)cat?/etc/issue(redhat)1.2、将所需安装包上传到服务器?zlib-1.2.8.tar.gzopenssl-1.0.1g.tar.gzopenssh-7.2p2.tar.gz?相关下载：、、、?//先把所有安装文件上传服务器，再卸载ssh，要不文件上传非常麻烦，在系统镜像中找到gcc安装包一并上传，大部分make失败都是gcc未安装或者安装不全造成。如果已安装可省略此步骤??第二步准备好其他远程方式?2.1、此项可选择telnet或者vnc来进行远程操作?开启telnet方法安装telnet-server-0.17-39.el5.i386.rpm，先上传到服务器执行即可rpm -ivh telnet-server-0.17-39.el5.i386.rpm可能会出现权限不够，执行chmod +x telnet-server-0.17-39.el5.i386.rpm即可开启服务#vi /etc/xinetd.d/telnet=================disable=yes 是关闭服务改成no 是开启服务{ disable = no flags = REUSE socket_type = stream wait = no user = root server = /usr/sbin/in.telnetd log_on_failure += USERID only_from = /24}=================only_from= 是指定ip端登陆，建议添加！！！vi /etc/securetty给root登陆权限，操作完毕后记得删除！！！?新增下列内容pts/1pts/2pts/3pts/4pts/5pts/6pts/7pts/8pts/9pts/10pts/11重启服务service xinetd restart//以上步骤保证root用户可以telnet,保证后续远程配置正常进行。??第三步程序升级?3.1、停止SSHD服务?#?/sbin/service?sshd?stop?3.2、备份启动脚本?#?cp?/etc/init.d/sshd??/root/?3.3、卸载系统里原有Openssh?#?rpm?-qaopenssh//查询系统原安装的openssh包,全部卸载。请根据查询结果对应卸载！#rpm?-e?openssh?--nodeps?#rpm?-e?openssh-server?--nodeps#rpm?-e?openssh-clients?--nodeps#rpm?-e?openssh-askpass删除原有的脚本，使用最新的脚本# chkconfig --del sshd# chkconfigsshd off# chkconfigsshd --listrm -rf /etc/init.d/sshd3.4、解压安装zlib包：?#tar?-zxvfzlib-1.2.8.tar.gz?//首先安装zlib库，否则会报zlib.c错误无法进行#chmod -R 750 zlib-1.2.8?#cd?zlib-1.2.8?#./configure?#makemake?install?3.5、解压安装openssl包：?#tar-zxvf openssl-1.0.1g.tar.gz#cd?openssl-1.0.1g#./config?shared?zlib#make#make?test?#make?install?#mv?/usr/bin/openssl?/usr/bin/openssl.OFF#mv?/usr/include/openssl?/usr/include/openssl.OFF?//该步骤可能提示无文件，忽略即可?#ln?-s?/usr/local/ssl/bin/openssl?/usr/bin/openssl?#ln?-s?/usr/local/ssl/include/openssl?/usr/include/openssl?//移走原先系统自带的openssl，将自己编译产生的新文件进行链接。?3.6、配置库文件搜索路径?#?echo?/usr/local/ssl/lib??/etc/ld.so.conf?#?/sbin/ldconfig?-v?#