keylin(麒麟) V10 sp2升级到openssl3.2.4和openssh9.9

1. 准备工作

1.1 下载所需软件包

需要准备以下三个软件包：

zlib-1.3.1.tar.gz https://www.zlib.net/zlib-1.3.1.tar.gz 
openssl-3.2.4.tar.gz https://www.openssl.org/source/ 
openssh-9.9p1.tar.gz  https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.9p1.tar.gz

2. 解压软件包

cd /home
tar --no-same-owner -zxvf zlib-1.3.1.tar.gz
tar --no-same-owner -zxvf openssl-3.2.4.tar.gz
tar --no-same-owner -zxvf openssh-9.9p1.tar.gz

 

3. 安装依赖库

3.1 安装 zlib

cd /usr/local
mv zlib zlib-bak  # 备份旧版本

cd /home/zlib-1.3.1
./configure --prefix=/usr/local/zlib
make && make install
echo $?  # 检查安装是否成功，返回0表示成功

3.2 安装 OpenSSL

cd /usr/local
mv ssl ssl-bak  # 备份旧版本

cd /data/soft/openssl-3.2.4
./config --prefix=/usr/local/ssl -d shared
make -j 4 && make install
echo $?  # 检查安装是否成功

# 更新系统openssl链接
mv /usr/bin/openssl /usr/bin/openssl_bak
ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl

mv /usr/include/openssl/ /usr/include/openssl_bak
ln -s /usr/local/ssl/include/openssl /usr/include/openssl

  ln -s /usr/local/ssl/lib64/libssl.so.3 /usr/lib64/libssl.so.3
  ln -s /usr/local/ssl/lib64/libcrypto.so.3 /usr/lib64/libcrypto.so.3 

# 更新动态库配置
echo '/usr/local/ssl/lib' >> /etc/ld.so.conf
ldconfig -v

# 验证安装
openssl version

 

4. 安装 OpenSSH

# 备份原有配置
mkdir /etc/sshbak
mv /etc/ssh/* /etc/sshbak

# 编译安装
cd /home/openssh-9.9p1
./configure --prefix=/usr/local/openssh9 \
            --sysconfdir=/etc/ssh \
            --with-zlib=/usr/local/zlib \
            --with-ssl-dir=/usr/local/ssl
make -j 4 && make install

 

5. 配置 SSH 服务

5.1 替换系统文件

# 备份并替换关键文件
mv /usr/sbin/sshd /usr/sbin/sshd.bak
cp /usr/local/openssh9/sbin/sshd /usr/sbin/sshd

mv /usr/bin/ssh /usr/bin/ssh.bak
cp /usr/local/openssh9/bin/ssh /usr/bin/ssh

mv /usr/bin/ssh-keygen /usr/bin/ssh-keygen.bak
cp /usr/local/openssh9/bin/ssh-keygen /usr/bin/ssh-keygen

# 更新init脚本
mv /etc/init.d/sshd /etc/init.d/sshd-bak
cd /homet/openssh-9.9p1
cp contrib/redhat/sshd.init /etc/init.d/sshd

# 处理systemd配置
cd /usr/lib/systemd/system
mkdir bak-ssh
mv sshd* bak-ssh/
systemctl daemon-reload

 

6. 启动服务并验证

service sshd restart
service sshd status 查看状态
ssh -V  # 验证版本

 

7. 问题

xshell不能登录，修改

 vim /etc/ssh/sshd_config 

PermitRootLogin yes

xftp不能登录，修改

vim  /etc/ssh/sshd_config

#Subsystem      sftp    /usr/local/openssh/libexec/sftp-server改成下面这句
Subsystem      sftp    internal-sftp

修改完成，重启ssh

service sshd restart

 

7. 还原

yum install -y openssh-server

yum install -y openssh-clients

yum install -y openssh

systemctl start sshd