#!/bin/bash
echo "开始升级openssh ......"
ssh -V
home=$(pwd)
cd ${home}
tar -zxvf soft.tar.gz
cd soft
cd gcc
rpm -ivh *.rpm --force --nodeps
cd ..
cd g++
rpm -ivh *.rpm --force --nodeps
cd ../openssl-devel
rpm -ivh *.rpm --force --nodeps
cd ../pam-devel
rpm -ivh *.rpm --force --nodeps
cd ../rpm-build
rpm -ivh *.rpm --force --nodeps
cd ../openssh/openssh-8.0p1/
./configure --prefix=/usr --sysconfdir=/etc/ssh --with-pam --with-zlib --with-md5-passwords --with-tcp-wrappers
make && make install
cp ./contrib/redhat/sshd.init /etc/init.d/sshd
chmod +x /etc/init.d/sshd
sed -i "s/#Port 22/Port 22/g" /etc/ssh/sshd_config
oldV='/usr/libexec/openssh/sftp-server'
newV='/usr/libexec/sftp-server'
sed -i "s:${oldV}:${newV}:g" /etc/ssh/sshd_config
sed -i "s/GSSAPICleanupCredentials no/#GSSAPICleanupCredentials no/g" /etc/ssh/sshd_config
sed -i "s/GSSAPIStrictAcceptorCheck yes/#GSSAPIStrictAcceptorCheck yes/g" /etc/ssh/sshd_config
sed -i "s/GSSAPIAuthentication yes/#GSSAPIAuthentication yes/g" /etc/ssh/sshd_config
chmod 620 /etc/ssh/moduli
chmod 600 /etc/ssh/ssh_host_rsa_key
chmod 600 /etc/ssh/ssh_host_ecdsa_key
chmod 600 /etc/ssh/ssh_host_ed25519_key
chown -R root.root /var/empty/sshd/
chmod 744 /var/empty/sshd/
sed -i "s/SELINUX=enforcing/SELINUX=disable/g" /etc/selinux/config
sed -i "s/Type=notify/Type=simple/g" /usr/lib/systemd/system/sshd.service
systemctl daemon-reload
service sshd restart
echo "openssh 升级完成"
ssh -V
