安装包下载
cd ~
wget http://www.zlib.net/zlib-1.2.11.tar.gz
wget https://www.openssl.org/source/openssl-1.1.1g.tar.gz
wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.4p1.tar.gz
依赖包
yum install -y openssl-devel zlib-devel gcc perl-Test-Harness pam-devel
安装zlib
cd ~
tar -zxvf zlib-1.2.11.tar.gz
cd zlib-1.2.11/
./configure
make && make install
安装openssl
cd ~
tar -zxvf openssl-1.1.1g.tar.gz
cd openssl-1.1.1g/
./config --prefix=/usr/local/openssl --openssldir=/usr/local/ssl
make && make install
./config shared --prefix=/usr/local/openssl --openssldir=/usr/local/ssl
make clean
make && make install
echo "/usr/local/ssl" >> /etc/ld.so.conf && ldconfig #模块加载
ln -s /usr/local/openssl/lib/libssl.so.1.1 /usr/lib64/libssl.so.1.1 #库加载
ln -s /usr/local/openssl/lib/libcrypto.so.1.1 /usr/lib64/libcrypto.so.1.1 #库加载
安装openssh
cd ~
cp -r /etc/ssh/ /etc/ssh_bak #配置文件备份
tar -zxvf openssh-8.4p1.tar.gz
cd openssh-8.4p1
./configure --prefix=/usr/local/openssh --sysconfdir=/etc/ssh2 --with-ssl-dir=/usr/local/openssl/ --without-openssl-header-check --with-md5-passwords --with-pam --with-tcp-wrappers --without-hardening
make && rpm -e --nodeps `rpm -qa | grep openssh` #make 成功后，删除旧版ssh
make install
环境变量恢复
cd ~/openssh-8.4p1
cp contrib/redhat/sshd.init /etc/init.d/sshd
chmod u+x /etc/init.d/sshd
chkconfig --add sshd
ln -s /usr/local/openssh/sbin/sshd /usr/sbin/sshd
ln -s /usr/local/openssh/bin/ssh-keygen /usr/bin/ssh-keygen
ln -s /usr/local/openssh/bin/ssh /usr/bin/ssh
ln -s /usr/local/openssh/bin/ssh-agent /usr/bin/ssh-agent
ln -s /usr/local/openssh/bin/scp /usr/bin/scp
ln -s /usr/local/openssh/bin/ssh-add /usr/bin/ssh-add
#配置sshd配置文件（配置文件位置位于/etc/ssh2目录下,旧版本的配置文件与新版本不太兼容）
cat >> /etc/ssh2/sshd_config << EOF
PermitEmptyPasswords no
Protocol 2
PermitRootLogin yes
passwordAuthentication yes
UseDNS no
X11Forwarding yes
PermitRootLogin yes
EOF
启动sshd
service sshd start
重启验证
shutdown -r now
检验版本
ssh -V
