<\/span><\/h3>\n\n\n\n\u628a\/etc\/securetty\u6587\u4ef6\u4e2d\u7684pts0 - pts3\u5168\u90e8\u6ce8\u91ca\u6389\u5c31\u53ef\u4ee5\u4e86\u3002<\/p>\n\n\n\n
\u5141\u8bb8root\u7528\u6237telnet\u767b\u5f55\u5219\u9700\u8981\u6dfb\u52a0\u4e0apst\u7c7b\u578b\u7684\u7ec8\u7aef\u3002<\/p>\n\n\n\n
\u5982\u542f\u52a8telnet\u670d\u52a1\u540e\uff0croot\u7528\u6237\u767b\u5f55\u62a5\u5982\u4e0b\u9519\u8bef\uff0c\u9700\u8981\u6309\u7167\u4e0a\u8ff0\u65b9\u5f0f\u8fdb\u884c\u8c03\u6574<\/p>\n\n\n\n
# telnet 192.168.56.123\nTrying 192.168.56.123...\nConnected to 192.168.56.123.\nEscape character is '^]'.\n\nKernel 3.10.0-514.el7.x86_64 on an x86_64\n#localhost login: root\nPassword: \nLogin incorrect\n<\/code><\/pre>\n\n\n\n\u8c03\u6574\u5b8c\u6210\u540e\uff1a<\/p>\n\n\n\n
# telnet192.168.56.123\n#localhost login: root\nPassword: \n\u767b\u5f55\u64cd\u4f5c\u7cfb\u7edf\n<\/code><\/pre>\n\n\n\n<\/span>\u67e5\u770bopenssh\u548copenssl\u7248\u672c<\/span><\/h2>\n\n\n\n# ssh -V\nOpenSSH_6.6.1p1, OpenSSL 1.0.1e-fips 11 Feb 2013\n\n# openssl version\nOpenSSL 1.0.1e-fips 11 Feb 2013\n<\/code><\/pre>\n\n\n\n<\/span>\u5907\u4efd\u5e76\u79fb\u9664\u8001\u6587\u4ef6<\/span><\/h2>\n\n\n\n# mkdir -p \/root\/update\n# cd \/root\/update\n# cp-rp\/etc\/ssh\/sshd_configsshd_config\n# cp -rp \/etc\/pam.d\/sshdsshd\n# cp -rp \/etc\/ssl\/ .\/\n# cp -rp \/usr\/bin\/opensslopenssl\n# cp -rp \/etc\/ssh \/root\/update\nmv \/usr\/bin\/openssl \/usr\/bin\/openssl_bak\n\n# yum remove openssl-devel\n# rm -rf \/etc\/ssl\n<\/code><\/pre>\n\n\n\n<\/span>\u5b89\u88c5\u4f9d\u8d56\u5305<\/span><\/h2>\n\n\n\n# yum install gcc\n# yum install gcc-c++ \n# yum install glibc\n# yum install make\n# yum installautoconf\n# yum installpcre-devel\n# yum install pam-devel\n# yum install zlib-devel.x86_64\n<\/code><\/pre>\n\n\n\n<\/span>\u89e3\u538b\u5e76\u5b89\u88c5openssl\u5305<\/span><\/h2>\n\n\n\n<\/span>\u89e3\u538b<\/span><\/h3>\n\n\n\n# tar -xvf openssl-1.1.1j.tar.gz\n# cd openssl-1.1.1j<\/code><\/pre>\n\n\n\n<\/span>\u914d\u7f6e<\/span><\/h3>\n\n\n\n# .\/config --prefix=\/usr\/local --openssldir=\/usr\/local\/ssl\nOperating system: x86_64-whatever-linux2\nConfiguring OpenSSL version 1.1.1j (0x101010afL) for linux-x86_64\nUsing os-specific seed configuration\nCreating configdata.pm\nCreating Makefile\n\n**********************************************************************\n*** ***\n*** OpenSSL has been successfully configured ***\n*** ***\n*** If you encounter a problem while building, please open an ***\n*** issue on GitHub <https:\/\/github.com\/openssl\/openssl\/issues> ***\n*** and include the output from the following command: ***\n*** ***\n*** perl configdata.pm --dump ***\n*** ***\n*** (If you are new to OpenSSL, you might want to consult the ***\n*** 'Troubleshooting' section in the INSTALL file first) ***\n*** ***\n**********************************************************************\n# echo $? -- \u68c0\u67e5\u914d\u7f6e\u662f\u5426\u6210\u529f<\/code><\/pre>\n\n\n\n<\/span>\u7f16\u8bd1\u5b89\u88c5<\/span><\/h3>\n\n\n\n# make&& make install\n# echo $? -- \u68c0\u67e5\u7f16\u8bd1\u5b89\u88c5\u662f\u5426\u6210\u529f\n<\/code><\/pre>\n\n\n\n<\/span>\u540e\u7eed<\/span><\/h3>\n\n\n\n# ln -s \/usr\/local\/bin\/openssl \/usr\/bin\/openssl\n# ln -s \/usr\/local\/include\/openssl \/usr\/include\/openssl\n\n# cat \/etc\/ld.so.conf\nincludeld.so.conf.d\/*.conf\n\n# echo \"\/usr\/local\/lib\" >> \/etc\/ld.so.conf\n# echo \"\/usr\/local\/lib64\" >> \/etc\/ld.so.conf\n# cat \/etc\/ld.so.conf\nincludeld.so.conf.d\/*.conf\n\/usr\/local\/lib\n\/usr\/local\/lib64\n\n# \/sbin\/ldconfig\n# openssl version\nOpenSSL 1.1.1j 16 Feb 2021\n<\/code><\/pre>\n\n\n\n<\/span>\u89e3\u538b\u5e76\u5b89\u88c5openssh\u5305<\/span><\/h2>\n\n\n\n# rm -rf \/etc\/ssh\n# cd \/root\/update\n\n# tar -xvf openssh-8.5p1.tar.gz\n# cdopenssh-8.5p1\n\n# .\/configure --prefix=\/usr\/ --sysconfdir=\/etc\/ssh --with-openssl-includes=\/usr\/local\/ssl\/include --with-ssl-dir=\/usr\/local\/ssl --with-zlib --with-md5-passwords --with-pam\n# echo $? -- \u68c0\u67e5\u914d\u7f6e\u662f\u5426\u6210\u529f\n\n# make clean\n# make&& make install\n# echo $? -- \u68c0\u67e5\u5b89\u88c5\u662f\u5426\u6210\u529f\n\n# cp -afcontrib\/redhat\/sshd.init \/etc\/init.d\/sshd\n# cp -afcontrib\/redhat\/sshd.pam \/etc\/pam.d\/sshd.pam\n# chmod +x \/etc\/init.d\/sshd\n\n# echo \" HostKey \/etc\/ssh\/ssh_host_rsa_key \">>\/etc\/ssh\/sshd_config\n#echo \"HostKey \/etc\/ssh\/ssh_host_ecdsa_key\">>\/etc\/ssh\/sshd_config\n# echo \"HostKey \/etc\/ssh\/ssh_host_ed25519_key\">>\/etc\/ssh\/sshd_config\n# echo\"PermitRootLogin yes\">>\/etc\/ssh\/sshd_config\n# echo\"PasswordAuthentication yes\">>\/etc\/ssh\/sshd_config\n# echo\"ChallengeResponseAuthentication no\">>\/etc\/ssh\/sshd_config\n# echo\"UsePAM yes\">>\/etc\/ssh\/sshd_config\n# echo\"X11Forwarding yes\">>\/etc\/ssh\/sshd_config\n\n# chkconfig --add sshd\n# systemctl list-unit-files sshd.service\nUNIT FILE STATE \nsshd.service enabled\n\n1 unit files listed.\n\n# mv \/usr\/lib\/systemd\/system\/sshd.service \/root\/update\/sshd.service\n# chkconfigsshd on\nNote: Forwarding request to 'systemctl enable sshd.socket'.\nCreated symlink from \/etc\/systemd\/system\/sockets.target.wants\/sshd.socket to \/usr\/lib\/systemd\/system\/sshd.socket.\n\n# systemctl enable sshd\nsshd.service is not a native service, redirecting to \/sbin\/chkconfig.\nExecuting \/sbin\/chkconfigsshd on\nNote: Forwarding request to 'systemctl enable sshd.socket'.\n\n# systemctl start sshd\n# ssh -V\nOpenSSH_8.5p1, OpenSSL 1.1.1j 16 Feb 2021\n<\/code><\/pre>\n\n\n\n<\/span>\u8ba9SHA1\u7ee7\u7eed\u53ef\u7528\u7684\u65b9\u6cd5<\/span><\/h2>\n\n\n\n\u5728sshd\u914d\u7f6e\u6587\u4ef6\u91cc\u589e\u52a0\u8fd9\u4e2a\u8ba4\u8bc1\u65b9\u6cd5<\/p>\n\n\n\n
HostKeyAlgorithms ssh-rsa<\/code><\/pre>","protected":false},"excerpt":{"rendered":"\u672c\u6587\u4ecb\u7ecd\u5728redhat 7\u4e0a\u5347\u7ea7openssh 8.5 p1\u7684\u65b9\u6cd5\uff0c\u5305\u62ecopenssl\u7684\u4f9d\u8d56\u5347\u7ea7\u3002<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[93,72],"class_list":["post-5282","post","type-post","status-publish","format-standard","hentry","category-1","tag-93","tag-linux"],"_links":{"self":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts\/5282","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/comments?post=5282"}],"version-history":[{"count":10,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts\/5282\/revisions"}],"predecessor-version":[{"id":12427,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts\/5282\/revisions\/12427"}],"wp:attachment":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/media?parent=5282"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/categories?post=5282"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/tags?post=5282"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}