建站
咨詢
售后
建站咨詢
新聞中心
這里有您想知道的互聯(lián)網(wǎng)營(yíng)銷(xiāo)解決方案
CentOS下使用OpenSSL編譯安裝OpenSSH具體方法
CentOS中如何使用OpenSSL編譯安裝OpenSSH？本篇文章為大家分享一下CentOS下使用OpenSSL編譯安裝OpenSSH具體方法，有需要的小伙伴可以參考一下。
成都創(chuàng)新互聯(lián)公司是一家集網(wǎng)站建設(shè),武城企業(yè)網(wǎng)站建設(shè),武城品牌網(wǎng)站建設(shè),網(wǎng)站定制,武城網(wǎng)站建設(shè)報(bào)價(jià),網(wǎng)絡(luò)營(yíng)銷(xiāo),網(wǎng)絡(luò)優(yōu)化,武城網(wǎng)站推廣為一體的創(chuàng)新建站企業(yè)，幫助傳統(tǒng)企業(yè)提升企業(yè)形象加強(qiáng)企業(yè)競(jìng)爭(zhēng)力?？沙浞譂M足這一群體相比中小企業(yè)更為豐富、高端、多元的互聯(lián)網(wǎng)需求。同時(shí)我們時(shí)刻保持專業(yè)、時(shí)尚、前沿，時(shí)刻以成就客戶成長(zhǎng)自我，堅(jiān)持不斷學(xué)習(xí)、思考、沉淀、凈化自己，讓我們?yōu)楦嗟钠髽I(yè)打造出實(shí)用型網(wǎng)站。
檢測(cè)已安裝的包
# rpm -qa | grep openssh openssh
# rpm -qa | grep openssh openssl
卸載用rpm -e 如果出現(xiàn)依賴包導(dǎo)致無(wú)法卸載，在最后面加上–nodeps即可,例：
# rpm -e openssl --nodeps
具體安裝過(guò)程如下：
下載最新軟件包源碼
http://ftp5.usa.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.3p1.tar.gz
http://www.openssl.org/source/openssl-1.0.2j.tar.gz
http://www.openssl.org/source/openssl-fips-2.0.13.tar.gz
使用YUM安裝必要的軟件開(kāi)發(fā)包
# yum install -y zlib-devel pam-devel tcp_wrappers-devel
安裝openssl-fips
具體說(shuō)明見(jiàn) http://www.openssl.org/docs/fips ;
# tar zxpf openssl-fips-2.0.5.tar.gz
# cd openssl-fips
# ./config
# make && make install
安裝OpenSSL
# tar zxpf openssl-1.0.1h.tar.gz
# cd openssl-1.0.1h
# ./config fips --shared
# make && make install
將新編譯的openssl library 加入系統(tǒng)動(dòng)態(tài)庫(kù)鏈接中
# echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
# ldconfig
安裝OpenSSH
# tar zxpf openssh-6.6p1.tar.gz
# cd openssh-6.6p1
# ./configure \
--prefix=/usr \
--sysconfdir=/etc/ssh \
--with-md5-passwords \
--with-pam \
--with-tcp-wrappers \
--with-ssl-dir=/usr/local/ssl
# make && make install
# ssh -V
修改相關(guān)配置
# cp -p contrib/redhat/sshd.init /etc/init.d/sshd (此處的contrib路徑為解壓后的OpenSSH包路徑)# chmod u+x /etc/init.d/sshd （加執(zhí)行權(quán)限）# chkconfig --add sshd （增加sshd服務(wù)）# chkconfig sshd on （把sshd加入啟動(dòng)項(xiàng)）# yum install openssh (安裝OpenSSH客戶端)# vim /etc/ssh/sshd_configPermitRootLogin yes #允許root賬戶登錄，單root賬戶必須加上，其他的參數(shù)請(qǐng)自行修改
測(cè)試登錄
# /etc/init.d/sshd start
ssh-keygen: illegal option -- A
Usage: ssh-keygen [options]
Options:
-a trials Number of trials for screening DH-GEX moduli.
-B Show bubblebabble digest of key file.
-b bits Number of bits in the key to create.
-C comment Provide new comment.
-c Change comment in private and public key files.
-e Convert OpenSSH to IETF SECSH key file.
-F hostname Find hostname in known hosts file.
-f filename Filename of the key file.
-G file Generate candidates for DH-GEX moduli.
-g Use generic DNS resource record format.
-H Hash names in known_hosts file.
-i Convert IETF SECSH to OpenSSH key file.
-l Show fingerprint of key file.
-M memory Amount of memory (MB) to use for generating DH-GEX moduli.
-N phrase Provide new passphrase.
-P phrase Provide old passphrase.
-p Change passphrase of private key file.
-q Quiet.
-R hostname Remove host from known_hosts file.
-r hostname Print DNS resource record.
-S start Start point (hex) for generating DH-GEX moduli.
-T file Screen candidates for DH-GEX moduli.
-t type Specify type of key to create.
-v Verbose.
-W gen Generator to use for generating DH-GEX moduli.
-y Read private key file and print public key.
Starting sshd: [ OK ]
sshd文件的ssh-keygen參數(shù)有問(wèn)題，暫時(shí)不知道怎么解決，但是不影響使用。
當(dāng)前題目：CentOS下使用OpenSSL編譯安裝OpenSSH具體方法
URL分享：http://m.fisionsoft.com.cn/article/dpigohs.html
