1.check old openssl
rpm -q openssl
openssl version
which openssl
whereis openssl
ls /etc/ssl
2、backup old openssl
mkdir /home/ssl_bak
mv /usr/bin/openssl /home/ssl_bak
mv /etc/ssl /home/ssl_bak/etc_ssl
mv /usr/include/openssl /home/ssl_bak/include_openssl
3、install
1)zlib
cd /usr/local/src
tar -zxvf zlib-1.2.11.tar.gz
cd zlib-1.2.11
./configure
make
make install
ll /usr/local/openssl
ls /usr/local/openssl/{bin,include,lib}
2)openssl
cd /usr/local/src
tar -zvxf openssl-1.0.2m.tar.gz
cd openssl
./config –prefix=/usr/local/openssl –openssldir=/etc/ssl shared
make
make install
ll /usr/local/openssl/{bin,include,lib}
ll /etc/ssl/
4.configure & upgrade opensll
ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/openssl/include/openssl /usr/include/openssl
vi /etc/ld.so.conf
/usr/local/lib64
/opt/kde3/lib64
–add the following line
/usr/local/openssl/lib
:wq
ldconfig
/usr/bin/openssl version -a
5.uninstall old openssh
service sshd stop
rpm -qa|grep openssh
rpm -e openssh –nodeps
6.upgrade openssh
cd /usr/local/src
tar -zxvf openssh-7.6p1.tar.gz
cd openssh
./configure –prefix=/usr –sysconfdir=/etc/ssh –with-openssl –with-md5-passwords –mandir=/usr/share/man –with-zlib –with-ssl-engine –with-ssl-dir=/usr/local/openssl
make
make install
ssh -V
7.setting up sshd service autostart
cd /usr/local/openssh/contrib
cp suse/rc.sshd /etc/init.d/sshd
chmod 755 /etc/init.d/sshd
chkconfig –add sshd
chkconfig sshd on
vi /etc/ssh/sshd_config
–add/modify the following line
PermitRootLogin yes
–uncomment the following line
PasswordAuthentication yes
:wq
