redhat 4.8 升级openssh 6.6 报错

现象：提示OpenSSL version mismatch. Built against 1000000f, you have信息，

whereis sshd

ssh:/usr/local/sshd

发现 该sshd 的路径跟 正常的 as 4.8 的路径不一样:sshd: /usr/sbin/sshd 

登陆进去，发现sshd的路径为/usr/local/sbin/sshd,现在已改为/usr/sbin/sshd，现可正常登陆

more /etc/init.d/sshd

RETVAL=0

prog="sshd"

# Some functions to make the below more readable

KEYGEN=/usr/bin/ssh-keygen

SSHD=/usr/sbin/sshd

RSA1_KEY=/etc/ssh/ssh_host_key

RSA_KEY=/etc/ssh/ssh_host_rsa_key

DSA_KEY=/etc/ssh/ssh_host_dsa_key

PID_FILE=/var/run/sshd.pid

修改 SSHD=为正常的 调用脚本路径、

 #######################

 ssh版本为 OpenSSH_4.3p2    升级时报错   configure: error: PAM headers not found 

装了zlib-devel  ，pam-devel包后，升级成功。

###########################

现象：编译报错c_zlib.c error: BIO_ZLIB_CTX has no member

处理结果：装了zlib-devel  ，pam-devel包后，升级成功。

######################

现象：编译报错c_zlib.c error: BIO_ZLIB_CTX has no member，装了zlib-devel和pam-devel编译安装成功，

          执行service sshd restart时报错：

          Starting sshd: /usr/sbin/sshd: error while loading shared libraries:

          libcrypto.so.1.0.0: failed to map segment from shared object: Permission denied

 关闭selinux后，ssh正常

#######################

 升级openssl 

which openssl 

/usr/bin/openssl 

1.wget http://www.openssl.org/source/openssl-1.0.1c.tar.gz

2.tar zxvf openssl-1.0.1c.tar.gz

3.cd openssl-1.0.1c

4../config --prefix=/usr  

5.make && make test && make install

1.checking whether getpgrp requires zero arguments... yes

2.checking OpenSSL header version... 1000103f (OpenSSL 1.0.1c 10 May 2012)

3.checking OpenSSL library version... 90802f (OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008)

4.checking whether OpenSSL‘s headers match the library... no

5.configure: error: Your OpenSSL headers do not match your

6.library. Check config.log for details.

7.If you are sure your installation is consistent, you can disable the check

8.by running "./configure --without-openssl-header-check".

9.Also see contrib/findssl.sh for help identifying header/library mismatches.

会无法正常运行

1.ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key

2.OpenSSL version mismatch. Built against 1000103f, you have 90802f

需带上 --shared参数 否则会出现头文件和库文件不匹配，重新解压openssl.tar.gz ，然后带上--shared编译

3.cd openssl-1.0.1c

4../config --prefix=/usr --shared    

#################################################################################

安装openssl 后无法找到 libcrypto.so.1.0.0 

 /usr/local/openssl/lib/libcrypto.so.1.0.0 

 编译前

将CentOS 5.8编译的/usr/local/openssl/lib/libcrypto.so拷贝到/lib目录下

suse 11 升级 6.7 报错，加上语句

if [ -f /lib/libcrypto.so.1.0.0 ];then

echo "libcryto.so.1.0.0 is in !"

else

cp libcrypto.so.1.0.0 /lib/libcrypto.so.1.0.0

ln -s /lib/libcrypto.so.1.0.0 /lib/libcrypto.so

fi

本文出自 “笨鸟先飞” 博客，请务必保留此出处http://2574526.blog.51cto.com/2564526/1598997

sshd升级过程中报错问题解决汇总.txt