1.check old openssl
rpm -q openssl
openssl version
which openssl
whereis openssl
ls /etc/ssl
成都创新互联是一家专业提供曲靖企业网站建设,专注与网站建设、做网站、H5建站、小程序制作等业务。10年已为曲靖众多企业、政府机构等服务。创新互联专业的建站公司优惠进行中。
2、backup old openssl
mkdir /home/ssl_bak
mv /usr/bin/openssl /home/ssl_bak
mv /etc/ssl /home/ssl_bak/etc_ssl
mv /usr/include/openssl /home/ssl_bak/include_openssl
3、install
1)zlib
cd /usr/local/src
tar -zxvf zlib-1.2.11.tar.gz
cd zlib-1.2.11
./configure
make
make install
ll /usr/local/openssl
ls /usr/local/openssl/{bin,include,lib}
2)openssl
cd /usr/local/src
tar -zvxf openssl-1.0.2m.tar.gz
cd openssl
./config --prefix=/usr/local/openssl --openssldir=/etc/ssl shared
make
make install
ll /usr/local/openssl/{bin,include,lib}
ll /etc/ssl/
4.configure & upgrade opensll
ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/openssl/include/openssl /usr/include/openssl
vi /etc/ld.so.conf
/usr/local/lib64
/opt/kde3/lib64
--add the following line
/usr/local/openssl/lib
:wq
ldconfig
/usr/bin/openssl version -a
5.uninstall old openssh
service sshd stop
rpm -qa|grep openssh
rpm -e openssh --nodeps
6.upgrade openssh
cd /usr/local/src
tar -zxvf openssh-7.6p1.tar.gz
cd openssh
./configure --prefix=/usr --sysconfdir=/etc/ssh --with-openssl --with-md5-passwords --mandir=/usr/share/man --with-zlib --with-ssl-engine --with-ssl-dir=/usr/local/openssl
make
make install
ssh -V
7.setting up sshd service autostart
cd /usr/local/openssh/contrib
cp suse/rc.sshd /etc/init.d/sshd
chmod 755 /etc/init.d/sshd
chkconfig --add sshd
chkconfig sshd on
vi /etc/ssh/sshd_config
--add/modify the following line
PermitRootLogin yes
--uncomment the following line
PasswordAuthentication yes
:wq
