如何升级OpenSSH

一、查看最新版本
http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/


二、安装
升级需要几个组件
yum install -y gcc openssl-devel pam-devel rpm-build
下载升级包
wget http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.5p1.tar.gz
解压升级包，并安装
tar -zxvf openssh-7.5p1.tar.gz
cd openssh-7.5p1
./configure --prefix=/usr --sysconfdir=/etc/ssh --with-pam --with-zlib --with-md5-passwords --with-tcp-wrappers
make && make install

三、修改GSSAPIAuthentication配置
sed -i '/^GSSAPICleanupCredentials/s/GSSAPICleanupCredentials yes/#GSSAPICleanupCredentials yes/' /etc/ssh/sshd_config
sed -i '/^GSSAPIAuthentication/s/GSSAPIAuthentication yes/#GSSAPIAuthentication yes/' /etc/ssh/sshd_config
sed -i '/^GSSAPIAuthentication/s/GSSAPIAuthentication no/#GSSAPIAuthentication no/' /etc/ssh/sshd_config

四、重启
service sshd restart
service sshd status 查看状态
附：
查看升级后版本 ssh -V
连接工具的加密算法列表中选择 aes256-ctr， mac加密列表中选择hmac-sha2-256