openssh-7.9p1+openssl-1.1.0h一键升级

#!/bin/bash #update cnetos6X : openssh and openssl version : OpenSSH_7.9p1, OpenSSL 1.1.0h #20181009 #sort url #openssl_url="ftp://anquan:[email protected]/openssl-1.1.0h.tar.gz" #openssh_url="ftp://anquan:[email protected]/openssh-7.9p1.tar.gz" #zlib_url="ftp://anquan:[email protected]/zlib-1.2.8.tar.gz" str=`ssh -V 2>&1` if [[ "$str" =~ "7.9p1" ]] && [[ "$str" =~ "1.1.0h" ]] then echo "update success" ssh -V exit 1 fi #update openssl cd /home/ssh7.9 #wget $zlib_url #if [ $? -ne 0 ];then # echo "download zlib failed." # exit #fi tar zxf zlib-1.2.8.tar.gz cd zlib-1.2.8 ./configure --shared make && make install if [ $? -eq 0 ];then echo "make zlib success" else echo "make zlib failed" exit fi cd /home/ssh7.9 #rm -rf openssl* #wget $openssl_url if [ $? -ne 0 ];then echo "download openssl failed" exit else echo "download openssl success" fi tar zxf openssl-1.1.0h.tar.gz cd /home/ssh7.9/openssl-1.1.0h ./config shared make && make install if [ $? -ne 0 ];then echo "make openssl failed" exit else echo "make openssl success" fi #mv -f /usr/bin/openssl /usr/bin/openssl.OFF #mv -f /usr/include/openssl /usr/include/openssl.OFF ln -s -f /usr/local/ssl/bin/openssl /usr/bin/openssl ln -s -f /usr/local/ssl/include/openssl /usr/include/openssl echo "/usr/local/ssl/lib" >> /etc/ld.so.conf ldconfig -v #update openssh openssh cd /home/ssh7.9 #rm -rf openssh* #wget $openssh_url if [ $? -ne 0 ];then echo "download openssh failed" exit else echo "download openssh success" fi rpm -e openssh --nodeps tar zxf openssh-7.9p1.tar.gz #yum install -y pam-devel cd /home/ssh7.9/openssh-7.9p1 # ./configure --prefix=/usr --sysconfdir=/etc/ssh --with-pam --with-zlib --with-md5-passwords --with-ssl-dir=/usr/local/ssl #./configure ./configure --without-openssl-header-check make && make install if [ $? -ne 0 ];then echo "make openssh failed" exit else echo "make openssh success" fi cp -f /home/ssh7.9/openssh-7.9p1/contrib/redhat/sshd.init /etc/init.d/sshd sed 's/^GSSAPI/#GSSAPI/' /etc/ssh/sshd_config -i sed '/GSSAPIAuthentication no/s/^/#/' /etc/ssh/ssh_config -i sed -i 's/PermitRootLogin yes/PermitRootLogin no/' /etc/ssh/sshd_config /usr/sbin/sshd -t -f /etc/ssh/sshd_config str=`ssh -V 2>&1` if [[ "$str" =~ "7.9p1" ]] && [[ "$str" =~ "1.1.0h" ]] then echo "update success" # cd /tmp/ && rm -rf openssh* openssl* zlib* else echo "update failed" exit 1 fi sleep 1s /etc/init.d/sshd restart sleep 5s ps aux | grep -v grep | grep -q '/usr/sbin/sshd' if [ $? -ne 0 ];then /etc/init.d/sshd start fi chkconfig sshd on