1、安装依赖工具# CentOS/RHEL yum install -y gcc make zlib-devel openssl-devel pam-devel # Ubuntu/Debian apt install -y gcc make libssl-dev libpam0g-dev2、备份原有配置关键用于回滚cp -r /etc/ssh /etc/ssh.bak.$(date %Y%m%d) cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak3、升级依赖注意CentOS 7 自带 OpenSSL 1.0.2无法直接编译 OpenSSH 10.2必须先升级 OpenSSL。3.1、下载并编译 OpenSSL 1.1.1cd /usr/local/srcwget https://www.openssl.org/source/openssl-1.1.1w.tar.gztar -zxvf openssl-1.1.1w.tar.gzcd openssl-1.1.1w./config --prefix/usr/local/openssl11 --shared zlibmake -j4 make install3.2、配置动态链接器echo /usr/local/openssl11/lib /etc/ld.so.conf.d/openssl11.confldconfig4、编译安装 OpenSSH4.1、下载最新源码cd /usr/local/srcwget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-10.2p1.tar.gztar -zxvf openssh-10.2p1.tar.gzcd openssh-10.2p14.2、配置编译指定新版 OpenSSL 路径./configure --prefix/usr \ --sysconfdir/etc/ssh \ --with-ssl-dir/usr/local/openssl11 \ --with-zlib \ --without-openssl-header-check4.3、编译与安装make -j4 make install4.4、修复配置与权限解决 Access deniedvim /etc/ssh/sshd_config修改以下内容4.5、修复密钥权限chmod 600 /etc/ssh/ssh_host_*_keychmod 644 /etc/ssh/ssh_host_*_key.pubchown root:root /etc/ssh/ssh_host_*_keysetenforce 0ssh-keygen -A4.6、重启 SSH 服务systemctl restart sshd4.7、检查状态systemctl status sshdssh -V4.8、本地测试登录不要退出当前终端新开终端测试ssh rootlocalhost