openssh6.8升级方案V2.0

openssh6.8升级参考指南(仅供参考，请自行测试)
务必开启telnet防止登不上
系统信息如下：
系统版本：Red Hat Enterprise Linux Server release 6.5 (Santiago) 64位
openssl和openssh版本OpenSSH_5.3p1, OpenSSL 1.0.0-fips 29 Mar 2010
1.升级所需要的安装包
不同的环境需要不同的安装包，此次安装需要安装包如下
GCC环境所需的安装包：
ppl-0.10.2-11.el6.x86_64.rpm
cloog-ppl-0.15.7-1.2.el6.x86_64.rpm
mpfr-2.4.1-6.el6.x86_64.rpm
cpp-4.4.7-4.el6.x86_64.rpm
gcc-4.4.7-4.el6.x86_64.rpm
编译安装openssl和openssh所需的安装包
zlib-devel-1.2.3-29.el6.x86_64.rpm
pam-devel-1.1.1-17.el6.x86_64.rpm
OpenSSH 升级所需安装包：
openssl-1.0.0s.tar.gz
openssh-6.8p1.tar.gz
2.升级相关步骤
2.1安装GCC环境所需的安装包和相关软件包
[root@localhost opt]# rpm -ivh ppl-0.10.2-11.el6.x86_64.rpm [root@localhost opt]# rpm -ivh cloog-ppl-0.15.7-1.2.el6.x86_64.rpm [root@localhost opt]# rpm -ivh mpfr-2.4.1-6.el6.x86_64.rpm [root@localhost opt]# rpm -ivh cpp-4.4.7-4.el6.x86_64.rpm
[root@localhost opt]# rpm -ivh gcc-4.4.7-4.el6.x86_64.rpm
[root@localhost opt]# rpm -ivh zlib-devel-1.2.3-29.el6.x86_64.rpm [root@localhost opt]# rpm -ivh pam-devel-1.1.1-17.el6.x86_64.rpm 2.2卸载系统自带的openssh，同时清除系统/etc/ssh目录
备份openssh的配置文件
[root@localhost opt]#cp -r /etc/ssh /etc/ssh_bak
[root@localhost opt]# cp/etc/init.d/sshd /etc/init.d/sshd_bak [root@localhost opt]#cp/usr/sbin/sshd /usr/sbin/sshd_bak
[root@localhost opt]# rpm -qa | grepopenssh
openssh-5.3p1-94.el6.x86_64
openssh-clients-5.3p1-94.el6.x86_64
openssh-server-5.3p1-94.el6.x86_64
openssh-askpass-5.3p1-94.el6.x86_64
[root@localhost opt]# rpm -e openssh-server
[root@localhost opt]# rpm -e openssh-askpass
[root@localhost opt]# rpm -e openssh-clients --nodeps
[root@localhost opt]# rpm -e openssh
[root@localhost ~]# rm -rf /etc/ssh
2.3 安装openssl
[root@localhost opt]# tar -zxvf openssl-1.0.0s.tar.gz
[root@localhost opt]# cd openssl-1.0.0s
[root@localhost openssl-1.0.0s]# ./config --prefix=/usr/local/openssl&& make && make install
2.4安装openssh
[root@localhost openssl-1.0.0s]# cd /opt
[root@localhost opt]# tar -zxvf openssh-6.8p1.tar.gz
[root@localhost opt]# cd openssh-6.8p1
[root@localhost openssh-6.8p1]# ./configure --prefix=/usr/local/openssh
--sysconfdir=/etc/ssh --with-ssl-dir=/usr/local/openssl --with-zlib=/usr/local/zlib --with-md5-passwords --without-hardening && make && make install
2.5修改配置文件
[root@localhost openssh-6.8p1]# cpcontrib/redhat/sshd.init/etc/init.d/sshd [root@localhost openssh-6.8p1]# chmod +x /etc/init.d/sshd
[root@localhost openssh-6.8p1]# vi /etc/init.d/sshd
修改对应指令的安装目录
=============================
25行SSHD=/usr/sbin/sshd 为SSHD=/usr/local/openssh/sbin/sshd
41行/usr/bin/ssh-keygen -A 为/usr/local/openssh/bin/ssh-keygen -A
=============================
保存退出
2.6加入系统服务
[root@localhost openssh-6.8p1]# chkconfig --add sshd [root@localhost openssh-6.8p1]# service sshdstart [root@localhost openssh-6.8p1]# service sshd restart
断开重连可以登录
Xshell:\>ssh 192.168.138.128
Connecting to 192.168.138.128:22...
Connection established.
To escape to local shell, press 'Ctrl+Alt+]'.
Last login: Tue Nov 3 05:51:34 2015 from 192.168.138.1 [root@localhost ~]#
2.7查看升级后的系统版本
[root@localhost ~]# ssh -V
OpenSSH_6.8p1, OpenSSL 1.0.0s 11 Jun 2015
三：失败回退
3.1备份目录回退
[root@localhost ~]# service sshd stop
Stopping sshd: [ OK ]
[root@localhost ~]# cd /etc
[root@localhostetc]# rm -rfssh
[root@localhostetc]# cp -r /etc/ssh_bak /etc/ssh/
[root@localhostetc]# cd /etc/init.d
[root@localhostinit.d]#rmsshd
rm: remove regular file `sshd'? y
[root@localhostinit.d]# cp /etc/init.d/sshd_bak /etc/init.d/sshd
[root@localhostinit.d]# cd /usr/sbin/
[root@localhostsbin]# rmsshd
[root@localhostsbin]#cp /usr/sbin/sshd_bak/usr/sbin/sshd、
3.2安装rpm包
[root@localhost opt]# rpm -ivh openssh-5.3p1-94.el6.x86_64.rpm
openssh-clients-5.3p1-94.el6.x86_64.rpm
openssh-askpass-5.3p1-94.el6.x86_64.rpm
openssh-server-5.3p1-94.el6.x86_64.rpm
[root@localhost opt]# service sshd start
Starting sshd: [ OK ]
[root@localhost ~]# ssh -V
OpenSSH_5.3p1, OpenSSL 1.0.0-fips 29 Mar 2010。