openSSH升级常见报错汇总

浅浅的花香味﹌ 2022-12-05 12:10 696阅读 0赞

openSSH升级(常见报错)

1:编译安装gcc

2:升级openSSL

3: openssl-devel安装

4:安装pam-devel

5:sshd未识别的服务

6: Linux每次重启xshell拒绝连接(已经开通root)

7: centos7升级openssh,启动ssh服务失败

8: checking OpenSSL library version... configure: error: OpenSSL >= 1.0.1 required (have "10000003 (OpenSSL 1.0.0-fips 29 Mar 2010)")

9: key exchange failed

1: bug截图

2:原因分析

3:解决方法

下面的解决方式,请详见我的博客,该文章只是主要针对报错给我的解决方案

[https://blog.csdn.net/qq\_26963433/article/details/108496965][https_blog.csdn.net_qq_26963433_article_details_108496965]

1:编译安装gcc

![20200910110833689.png][]

这是因为你的centos没有安装gcc,你是需要安装gcc的

进入安装目录

cd  /tools/openSSH/gcc

rpm  -ivh  \*.rpm --nodeps --force

2:升级openSSL

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70][]

发现还有错误,这是因为升级openSSH的同时需要先升级openSSL

3: openssl-devel安装

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 1][]

还有可能会包"OpenSSL headers missing - please install first or check config.log \*\*\*"的错误，这是缺少openssl-devel所致，只需安装openssl-devel即可，执行命令：yum install openssl-devel

4:安装pam-devel

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 2][]

提示你需要安装pam-devel

5:sshd未识别的服务

service sshd restart 启动后报错:为什么会报这个错哩,这是因为之前的Linux自带的openSSH卸载掉了

rpm -qa|grep openssh

![20200910110957286.png][]

依次卸载里面的安装包

rpm -e --nodeps openssh-server-5.3p1-94.el6.x86\_64

yum remove openssh -y

![20200910111006799.png][]

[https://www.cnblogs.com/nmap/p/10779658.html][https_www.cnblogs.com_nmap_p_10779658.html]

如果不拷贝,将会报sshd:未识别的服务这个错误,如果目录之前就存在,直接覆盖就好了

进入安装目录后 cd /training/openssh-8.0p1/

cp -a contrib/redhat/sshd.init /etc/init.d/sshd

cp -a contrib/redhat/sshd.pam /etc/pam.d/sshd.pam

chmod +x /etc/init.d/sshd

chkconfig --add sshd

然后再执行

service sshd restart

![20200910111018482.png][]

6: Linux每次重启xshell拒绝连接(已经开通root)

我升级完openssh后也遇到了这个问题，每次虚拟机重启都要使用Telnet登录重启一次sshd服务才能连接。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 3][]

原因分析

卸载之前

![20200910111045879.png][]

卸载之后

yum remove openssh -y

![20200910111057313.png][]

得出结论,不能卸载,因为重装后,并没有相关的openssh的服务端和客户端的安装包了,在centos7之前的版本是没有对应openssh8.0更新版本对应的服务端和客户端的安装包的

没有下面两个安装包

[http://www.rpmfind.net/linux/rpm2html/search.php?query=openssh-server(x86-64)][http_www.rpmfind.net_linux_rpm2html_search.php_query_openssh-server_x86-64]

openssh-server-8.0p1

openssh-clients-8.0p1

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 4][]

7: centos7升级openssh,启动ssh服务失败

编译安装时候

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 5][]

Starting sshd (via systemctl): Job for sshd.service failed because the control process exited with error code. See "systemctl status sshd.service" and "journalctl -xe" for details.

\[失败\]

查看启动状态

systemctl status sshd.service

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 6][]

如果不授权,会报如下错误哦,会导致启动失败

chmod 600 /etc/ssh/ssh\_host\_rsa\_key

chmod 600 /etc/ssh/ssh\_host\_ecdsa\_key

8: 编译指令错误

checking OpenSSL library version... configure: error: OpenSSL >= 1.0.1 required (have "10000003 (OpenSSL 1.0.0-fips 29 Mar 2010)")

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 7][]

问题原因：

centos6.5使用的openSSH编译安装指令不对

错误指令

./configure --prefix=/usr/ --sysconfdir=/etc/ssh --with-zlib --with-md5-passwords --with-pam && make install

正确指令

./configure --prefix=/usr/ --sysconfdir=/etc/ssh  --with-openssl-includes=/usr/local/ssl/include \\

--with-ssl-dir=/usr/local/ssl   --with-zlib   --with-md5-passwords   --with-pam  && make && make install

9: key exchange failed

1: bug截图

Key exchange failed. No compatible key exchange method. The server supports these methods: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 8][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 9][]

2:原因分析

升级高版本的openSSH后,新版本不支持老版本的密钥交换算法

3:解决方法

修改 /etc/ssh/sshd\_config配置文件,在最后面一行加上

KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1

[https_blog.csdn.net_qq_26963433_article_details_108496965]: https://blog.csdn.net/qq_26963433/article/details/108496965
[20200910110833689.png]: /images/20221123/a03099583c88495c8ad521b8b333f245.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70]: /images/20221123/a9330ba069a94a9f801e118a8bcaec29.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 1]: /images/20221123/369279ab1fb646199a92b9c5457f7741.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 2]: /images/20221123/ec99884c378f45b98e311af39d10d839.png
[20200910110957286.png]: /images/20221123/781cbd6ea50041b49cca10eb2cd9550a.png
[20200910111006799.png]: /images/20221123/0e305fbb44d948aebe195c3ecaa8e7ca.png
[https_www.cnblogs.com_nmap_p_10779658.html]: https://www.cnblogs.com/nmap/p/10779658.html
[20200910111018482.png]: /images/20221123/cb7ba39b415248c18a8776ee53cf3e21.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 3]: /images/20221123/d81f7e2803c140fcbe2290d989a4e292.png
[20200910111045879.png]: /images/20221123/36db50cc8a824e7a9c67842d32c9e62e.png
[20200910111057313.png]: /images/20221123/513433c7104941559c4a743f804f5eca.png
[http_www.rpmfind.net_linux_rpm2html_search.php_query_openssh-server_x86-64]: http://www.rpmfind.net/linux/rpm2html/search.php?query=openssh-server%28x86-64%29
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 4]: /images/20221123/1c83c4ba7f334334b09201e03179cfd2.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 5]: /images/20221123/216c122645504b7caefbacb7d05c3a7c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 6]: /images/20221123/fba4279835684d46ad43dba11053c9bb.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 7]: /images/20221123/b92d229b2b004e509270326602f2b184.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 8]: /images/20221123/d35892b2f82644b187bdc333d0fdb0b0.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI2OTYzNDMz_size_16_color_FFFFFF_t_70 9]: /images/20221123/12365e4f0be74475b1e41d4b9fc7c708.png