这篇“CentOS下怎么使用OpenSSL编译安装OpenSSH”文章的知识点大部分人都不太理解,所以小编给大家总结了以下内容,内容详细,步骤清晰,具有一定的借鉴价值,希望大家阅读完这篇文章能有所收获,下面我们一起来看看这篇“CentOS下怎么使用OpenSSL编译安装OpenSSH”文章吧。
# rpm -qa | grep openssh openssh# rpm -qa | grep openssh openssl
卸载用rpm -e 如果出现依赖包导致无法卸载,在最后面加上–nodeps即可,例:
# rpm -e openssl --nodeps
具体安装过程如下:
http://ftp5.usa.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.3p1.tar.gz http://www.openssl.org/source/openssl-1.0.2j.tar.gz http://www.openssl.org/source/openssl-fips-2.0.13.tar.gz
# yum install -y zlib-devel pam-devel tcp_wrappers-devel
具体说明见 http://www.openssl.org/docs/fips ;
# tar zxpf openssl-fips-2.0.5.tar.gz# cd openssl-fips# ./config# make && make install
# tar zxpf openssl-1.0.1h.tar.gz# cd openssl-1.0.1h# ./config fips --shared# make && make install
# echo "/usr/local/ssl/lib" >> /etc/ld.so.conf# ldconfig
# tar zxpf openssh-6.6p1.tar.gz# cd openssh-6.6p1# ./configure \ --prefix=/usr \
--sysconfdir=/etc/ssh \
--with-md5-passwords \
--with-pam \
--with-tcp-wrappers \
--with-ssl-dir=/usr/local/ssl# make && make install# ssh -V
修改相关配置
# cp -p contrib/redhat/sshd.init /etc/init.d/sshd (此处的contrib路径为解压后的OpenSSH包路径)# chmod u+x /etc/init.d/sshd (加执行权限)# chkconfig --add sshd (增加sshd服务)# chkconfig sshd on (把sshd加入启动项)# yum install openssh (安装OpenSSH客户端)# vim /etc/ssh/sshd_configPermitRootLogin yes #允许root账户登录,单root账户必须加上,其他的参数请自行修改
# /etc/init.d/sshd startssh-keygen: illegal option -- A
Usage: ssh-keygen [options]
Options:
-a trials Number of trials for screening DH-GEX moduli.
-B Show bubblebabble digest of key file.
-b bits Number of bits in the key to create.
-C comment Provide new comment.
-c Change comment in private and public key files.
-e Convert OpenSSH to IETF SECSH key file.
-F hostname Find hostname in known hosts file.
-f filename Filename of the key file.
-G file Generate candidates for DH-GEX moduli.
-g Use generic DNS resource record format.
-H Hash names in known_hosts file.
-i Convert IETF SECSH to OpenSSH key file.
-l Show fingerprint of key file.
-M memory Amount of memory (MB) to use for generating DH-GEX moduli.
-N phrase Provide new passphrase.
-P phrase Provide old passphrase.
-p Change passphrase of private key file.
-q Quiet.
-R hostname Remove host from known_hosts file.
-r hostname Print DNS resource record.
-S start Start point (hex) for generating DH-GEX moduli.
-T file Screen candidates for DH-GEX moduli.
-t type Specify type of key to create.
-v Verbose.
-W gen Generator to use for generating DH-GEX moduli.
-y Read private key file and print public key.
Starting sshd: [ OK ]
sshd文件的ssh-keygen参数有问题,暂时不知道怎么解决,但是不影响使用。
以上就是关于“CentOS下怎么使用OpenSSL编译安装OpenSSH”这篇文章的内容,相信大家都有了一定的了解,希望小编分享的内容对大家有帮助,若想了解更多相关的知识内容,请关注亿速云行业资讯频道。
亿速云提供多种品牌、不同类型SSL证书签发服务,包含:域名型、企业型、企业型专业版、增强型以及增强型专业版,单域名SSL证书300元/年起。点击查看>>
免责声明:本站发布的内容(图片、视频和文字)以原创、转载和分享为主,文章观点不代表本网站立场,如果涉及侵权请联系站长邮箱:is@yisu.com进行举报,并提供相关证据,一经查实,将立刻删除涉嫌侵权内容。