redhat 4.8 升级openssh 6.6 报错

现象:提示OpenSSL version mismatch. Built against 1000000f, you have信息,


whereis sshd

ssh:/usr/local/sshd

发现 该sshd 的路径跟 正常的 as 4.8 的路径不一样:sshd: /usr/sbin/sshd 



登陆进去,发现sshd的路径为/usr/local/sbin/sshd,现在已改为/usr/sbin/sshd,现可正常登陆


more /etc/init.d/sshd



RETVAL=0

prog="sshd"


# Some functions to make the below more readable

KEYGEN=/usr/bin/ssh-keygen

SSHD=/usr/sbin/sshd

RSA1_KEY=/etc/ssh/ssh_host_key

RSA_KEY=/etc/ssh/ssh_host_rsa_key

DSA_KEY=/etc/ssh/ssh_host_dsa_key

PID_FILE=/var/run/sshd.pid



修改 SSHD=为正常的 调用脚本路径、


 #######################



 ssh版本为 OpenSSH_4.3p2    升级时报错   configure: error: PAM headers not found 

装了zlib-devel  ,pam-devel包后,升级成功。


###########################


现象:编译报错c_zlib.c error: BIO_ZLIB_CTX has no member

处理结果:装了zlib-devel  ,pam-devel包后,升级成功。


######################


现象:编译报错c_zlib.c error: BIO_ZLIB_CTX has no member,装了zlib-devel和pam-devel编译安装成功,

          执行service sshd restart时报错:

          Starting sshd: /usr/sbin/sshd: error while loading shared libraries:

          libcrypto.so.1.0.0: failed to map segment from shared object: Permission denied

 

 关闭selinux后,ssh正常

#######################

 升级openssl 

which openssl 

/usr/bin/openssl 


1.wget http://www.openssl.org/source/openssl-1.0.1c.tar.gz

2.tar zxvf openssl-1.0.1c.tar.gz

3.cd openssl-1.0.1c

4../config --prefix=/usr  

5.make && make test && make install

 


1.checking whether getpgrp requires zero arguments... yes

2.checking OpenSSL header version... 1000103f (OpenSSL 1.0.1c 10 May 2012)

3.checking OpenSSL library version... 90802f (OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008)

4.checking whether OpenSSL's headers match the library... no

5.configure: error: Your OpenSSL headers do not match your

6.library. Check config.log for details.

7.If you are sure your installation is consistent, you can disable the check

8.by running "./configure --without-openssl-header-check".

9.Also see contrib/findssl.sh for help identifying header/library mismatches.

会无法正常运行


1.ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key

2.OpenSSL version mismatch. Built against 1000103f, you have 90802f


需带上 --shared参数 否则会出现头文件和库文件不匹配,重新解压openssl.tar.gz ,然后带上--shared编译

3.cd openssl-1.0.1c

4../config --prefix=/usr --shared    


#################################################################################

安装openssl 后无法找到 libcrypto.so.1.0.0 


 /usr/local/openssl/lib/libcrypto.so.1.0.0 

 

 

 编译前

将CentOS 5.8编译的/usr/local/openssl/lib/libcrypto.so拷贝到/lib目录下

suse 11 升级 6.7 报错,加上语句


if [ -f /lib/libcrypto.so.1.0.0 ];then

echo "libcryto.so.1.0.0 is in !"

else

cp libcrypto.so.1.0.0 /lib/libcrypto.so.1.0.0

ln -s /lib/libcrypto.so.1.0.0 /lib/libcrypto.so

fi