openssh升级

准备
zlib-1.2.8.tar.gz
openssl-1.0.2h.tar.gz
openssh-7.2p2.tar.gz

选装 telnet防止升级时ssh掉了
1.yum install telnet
2.yum install telnet-server
chkconfig telnet on
service xinetd restart
service iptables stop

通过srt使用telnet连接上去

删除原有的
service sshd stop
 rpm -qa openssh  
 rpm -e openssh-server
 rpm -e openssh-clients
 rpm -e openssh-askpass
 rpm -e openssh
 rm -rf /etc/ssh

安装前准备
yum install gcc

安装zlib
 tar -xvf zlib-1.2.8.tar.gz
 cd zlib-1.2.8
 ./configure --prefix=/usr/local/zlib && make && make install

安装ssl
tar -xvf openssl-1.0.2h.tar.gz
 cd openssl-1.0.2h
./config --prefix=/usr/local/openssl && make && make install

安装openssh
tar -xvf openssh-7.2p2.tar.gz
cd openssh-7.2p2
./configure --prefix=/usr/local/openssh --sysconfdir=/etc/ssh --with-ssl-dir=/usr/local/openssl --with-zlib=/usr/local/zlib --with-md5-passwords --without-hardening && make && make install

修改配置文件
 cp contrib/redhat/sshd.init /etc/init.d/sshd
 chmod +x /etc/init.d/sshd
 vi /etc/init.d/sshd修改对应指令的安装目录
=============================
25行    SSHD=/usr/sbin/sshd 为 SSHD=/usr/local/openssh/sbin/sshd
41行    /usr/bin/ssh-keygen -A 为 /usr/local/openssh/bin/ssh-keygen -A
=============================
保存退出

chkconfig --add sshd
service sshd start

关闭telnet-server
service xinetd stop

service iptable start