1. #!/bin/bash
    2. # 安装编译环境
    3. yum install  -y gcc gcc-c++ glibc make autoconf openssl openssl-devel pcre-devel  pam* zlib*
    6. # 【openssl】
    7. # 编译安装openssl
    8. wget --no-check-certificate https://www.openssl.org/source/old/1.0.2/openssl-1.0.2u.tar.gz
    9. tar xf openssl-1.0.2u.tar.gz
    10. cd openssl-1.0.2u
    11. ./config shared && make && make install
    13. # 备份当前openssl
    14. mv /usr/bin/openssl /usr/bin/openssl_bak
    15. mv /usr/include/openssl /usr/include/openssl_bak
    18. # 创建软连接
    19. ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
    20. ln -s /usr/local/ssl/include/openssl /usr/include/openssl
    22. # 加载新配置
    23. echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
    24. /sbin/ldconfig
    25. # 查看当前openssl 版本
    26. openssl version
    27. cd ..
    30. # 【openssh】
    31. # 编译安装
    32. wget https://mirrors.aliyun.com/pub/OpenBSD/OpenSSH/portable/openssh-8.9p1.tar.gz
    33. tar xf openssh-8.9p1.tar.gz
    34. cd openssh-8.9p1
    36. ./configure --prefix=/usr/local/myssh_8.9p1 \
    37. --sysconfdir=/usr/local/myssh_8.9p1/ssh \
    38. --with-openssl-includes=/usr/local/ssl/include \
    39. -with-ssl-dir=/usr/local/ssl \
    40. --with-privsep-user=sshd --with-zlib  \
    41. --with-pam 
    44. make && make install
    46. # 备份openssh
    47. mv /etc/init.d/sshd /etc/init.d/sshd.bak_`date '+%Y%m%d'`
    48. mv /usr/sbin/sshd /usr/sbin/sshd.bak_`date '+%Y%m%d'`
    49. mv /etc/ssh/sshd_config /etc/ssh/sshd_config.bak_`date '+%Y%m%d'`
    52. # 创建软连接
    53. ln -s /usr/local/myssh_8.9p1/sbin/sshd /usr/sbin/sshd
    54. ln -s /usr/local/myssh_8.9p1/ssh/sshd_config /etc/ssh/sshd_config
    56. # 复制sshd启动脚本
    57. cp contrib/redhat/sshd.init /etc/init.d/sshd
    58. # 允许root用户远程连接
    59. # sed -i '20a PermitRootLogin yes' /usr/local/myssh_8.9p1/ssh/sshd_config
    61. # 避开绿盟安全扫描
    62. echo "Protocol 2" >> /usr/local/myssh_8.9p1/ssh/sshd_config
    63. echo "Banner /etc/ssh_banner" >> /usr/local/myssh_8.9p1/ssh/sshd_config
    64. # 禁止dns解析
    65. sed -i 's/#UseDNS no/UseDNS no/g'  /usr/local/myssh_8.9p1/ssh/sshd_config
    67. # 不移走的话影响启动
    68. mv  /usr/lib/systemd/system/sshd.service  /root/
    69. chkconfig sshd on
    71. # 重启sshd
    72. systemctl restart sshd
    74. # sed -i 's/PermitRootLogin yes/PermitRootLogin no/g' /usr/local/myssh_8.9p1/ssh/sshd_config
    75. sed -i 's/PermitRootLogin no/PermitRootLogin yes/g' /usr/local/myssh_8.9p1/ssh/sshd_config
    76. #