CentOS 7.2离线升级openssh-8.0p1、openssl-1.1.1c安装包下载:
1、openssl: https://www.openssl.org/source/openssl-1.1.1c.tar.gz
2、openssh:http://ftp5.usa.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.0p1.tar.gz
3、telnet: https://mirrors.aliyun.com/centos/7/os/x86_64/Packages/telnet-0.17-64.el7.x86_64.rpm
4、telnet-server: https://mirrors.aliyun.com/centos/7/os/x86_64/Packages/telnet-server-0.17-64.el7.x86_64.rpm
5、 xinetd:https://mirrors.aliyun.com/centos/7/os/x86_64/Packages/xinetd-2.3.15-13.el7.x86_64.rpm
6、pam-devel: http://rpm.pbone.net/index.php3?stat=26&dist=95&size=186740&name=pam-devel-1.1.8-12.el7_1.1.x86_64.rpm
=================================================
更新升级到openssh8.3p1&openssl 1.1.1g:
1、下载openssl 1.1.1g:
https://www.openssl.org/source/openssl-1.1.1g.tar.gz
2、下载openssh8.3p1:https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.3p1.tar.gz
3、安装过程同下,只需将原来的openssh-8.0p1、openssl-1.1.1c安装包换成openssh8.3p1&openssl 1.1.1g即可。
一、准备工作:
1.1 整个过程不需要卸载原先的openssl包和openssh的rpm包
# 备份配置文件和目录
$ cp -rp /etc/ssh{,.backup`date "+%Y%m%d"`}
# 检查iptables selinux是否关闭
$ getenforce
$ iptables -L
$ sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config
$ systemctl stop firewalld
$ systemctl disable firewalld
1.2 可以开启tenlet服务,避免openssh服务因故障中断
#如果yum源可以直接使用则使用yum命令