1. #!/bin/bash
    2. # 安装编译环境
    3. yum install  -y gcc gcc-c++ glibc make autoconf openssl openssl-devel pcre-devel  pam pam-devel
    5. # 【openssl】
    6. # 备份当前openssl
    7. mv /usr/bin/openssl /usr/bin/openssl_bak
    8. mv /usr/include/openssl /usr/include/openssl_bak
    11. # 编译安装openssl
    12. tar xf openssl-1.0.2u.tar.gz
    13. cd openssl-1.0.2u
    14. ./config shared && make && make install
    16. # 创建软连接
    17. ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
    18. ln -s /usr/local/ssl/include/openssl /usr/include/openssl
    20. # 加载新配置
    21. echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
    22. /sbin/ldconfig
    23. # 查看当前openssl 版本
    24. openssl version
    25. cd ..
    27. # 【openssh】
    28. # 编译安装
    29. tar xf openssh-8.8p1.tar.gz
    30. cd openssh-8.8p1
    32. ./configure --prefix=/usr/local/myssh_8.8p1 \
    33. --sysconfdir=/usr/local/myssh_8.8p1/ssh \
    34. --with-openssl-includes=/usr/local/ssl/include \
    35. -with-ssl-dir=/usr/local/ssl \
    36. --with-privsep-user=sshd --with-zlib  \
    37. --with-pam \
    38. --with-md5-passwords
    40. make && make install
    42. # 备份openssh
    43. mv /etc/init.d/sshd /etc/init.d/sshd.bak
    44. mv /usr/sbin/sshd /usr/sbin/sshd.bak
    45. mv /usr/bin/ssh-keygen /usr/bin/ssh-keygen.bak
    46. mv /etc/ssh/sshd_config /etc/ssh/sshd_config.bak_`date '+%Y%m%d'`
    49. # 创建软连接
    50. ln -s /usr/local/myssh_8.8p1/sbin/sshd /usr/sbin/sshd
    51. ln -s /usr/local/myssh_8.8p1/ssh/sshd_config /etc/ssh/sshd_config
    53. # 复制sshd启动脚本
    54. cp -a contrib/redhat/sshd.init /etc/init.d/sshd
    55. cp -a /usr/local/myssh_8.8p1/bin/ssh-keygen /usr/bin/ssh-keygen
    57. # 允许root用户远程连接
    58. sed -i '20a PermitRootLogin yes' /usr/local/myssh_8.8p1/ssh/sshd_config
    59. # 避开绿盟安全扫描
    60. echo "Protocol 2" >> /usr/local/myssh_8.8p1/ssh/sshd_config
    61. echo "Banner /etc/ssh_banner" >> /usr/local/myssh_8.8p1/ssh/sshd_config
    63. # 设置对旧版本支持的算法，否则会报错no hostkey algno 
    64. echo "HostKeyAlgorithms=+ssh-rsa,ssh-dss" >> /usr/local/myssh_8.8p1/ssh/sshd_config
    66. # 禁止dns解析
    67. sed -i 's/#UseDNS no/UseDNS no/g'  /usr/local/myssh_8.8p1/ssh/sshd_config
    70. #
    71. chkconfig sshd on
    72. #service sshd restart
    73. #sed -i 's/PermitRootLogin yes/PermitRootLogin no/g' /usr/local/myssh_8.8p1/ssh/sshd_config