1. #!/bin/bash
    2. #
    3. # 准备编译环境
    4. apt-get install libpam0g-dev gcc zlib1g-dev   -y
    6. # 【openssl】
    7. # 备份当前openssl
    8. mv /usr/bin/openssl /usr/bin/openssl_bak
    9. mv /usr/include/openssl /usr/include/openssl_bak
    12. # 编译安装openssl
    13. tar xf openssl-1.0.2u.tar.gz
    14. cd openssl-1.0.2u
    15. ./config shared && make && make install
    17. # 创建软连接
    18. ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
    19. ln -s /usr/local/ssl/include/openssl /usr/include/openssl
    21. # 加载新配置
    22. echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
    23. /sbin/ldconfig
    24. # 查看当前openssl 版本
    25. openssl version
    26. cd ..
    28. # 【openssh】
    29. # 编译安装
    30. tar xf openssh-8.8p1.tar.gz
    31. cd openssh-8.8p1
    33. ./configure --prefix=/usr/local/myssh_8.8p1 \
    34. --sysconfdir=/usr/local/myssh_8.8p1/ssh \
    35. --with-openssl-includes=/usr/local/ssl/include \
    36. -with-ssl-dir=/usr/local/ssl \
    37. --with-privsep-user=sshd --with-zlib  \
    38. --with-pam \
    39. --with-md5-passwords \
    40. --without-openssl-header-check
    42. make && make install
    44. # 备份openssh
    45. mv /etc/init.d/sshd /etc/init.d/sshd.bak
    46. mv /usr/sbin/sshd /usr/sbin/sshd.bak
    47. mv /etc/ssh/sshd_config /etc/ssh/sshd_config.bak_`date '+%Y%m%d'`
    50. # 创建软连接
    51. ln -s /usr/local/myssh_8.8p1/sbin/sshd /usr/sbin/sshd
    52. ln -s /usr/local/myssh_8.8p1/ssh/sshd_config /etc/ssh/sshd_config
    54. #
    55. sed -i '20a PermitRootLogin yes' /usr/local/myssh_8.8p1/ssh/sshd_config
    57. # 避开绿盟安全扫描
    58. echo "Protocol 2" >> /usr/local/myssh_8.8p1/ssh/sshd_config
    59. echo "Banner /etc/ssh_banner" >> /usr/local/myssh_8.8p1/ssh/sshd_config
    61. # systemctl restart sshd