1、安裝需要的包
yum -y install gcc* make perl pam pam-devel zlib-devel tcp_wrappers-devel bzip2-devel openssl-devel ncurses-devel sqlite-devel readline-devel tk-devel
2、安裝openssl
wget https://www.openssl.org/source/openssl-1.0.2l.tar.gz tar xf openssl-1.0.2l.tar.gz cd openssl-1.0.2l ./config --prefix=/usr/local/openssl && make && make install ln -s /usr/local/openssl/include/openssl /usr/include/openssl
3、將新編譯的openssl library 加入系統動態庫鏈接中
echo "/usr/local/openssl/lib" >> /etc/ld.so.conf
4、安裝openssh
mv /etc/ssh/ /etc/sshbak wget https://openbsd.hk/pub/OpenBSD/OpenSSH/portable/openssh-7.6p1.tar.gz tar xf openssh-7.6p1.tar.gz cd openssh-7.6p1 ./configure --prefix=/usr --sysconfdir=/etc/ssh --with-pam --with-ssl-dir=/usr/local/openssl --with-md5-passwords --mandir=/usr/share/man --with-kerberos5=/usr/lib64/libkrb5.so make && make install cp /etc/sshbak/* /etc/ssh/
注，新版本是禁止root直接登錄的，要將PermitRootLogin改爲yes
sed -i '/^#PermitRootLogin/s@^#@@' /etc/ssh/sshd_config service sshd restart