openssh8.3p1RPM升级ChongDanYiQieHuiYi的博客-

1.下载openssh8.3p1升级包

    centos7 https://download.csdn.net/download/ChongDanYiQieHuiYi/12506468

    centos6 https://download.csdn.net/download/ChongDanYiQieHuiYi/12507873

 cp ssh.repo /etc/yum.repos.d/ssh.repo mv x86_64 /tmp/ yum clean all yum install -y openssh [root@VM_0_11_centos RPMS]# sshd -v unknown option -- v OpenSSH_8.3p1, OpenSSL 1.0.2k-fips  26 Jan 2017 usage: sshd [-46DdeiqTt] [-C connection_spec] [-c host_cert_file]             [-E log_file] [-f config_file] [-g login_grace_time]             [-h host_key_file] [-o option] [-p port] [-u len]

2.异常处理：

a.CRT7.0.0由于sshd升级弱算法将不采用

 Key exchange failed. No compatible key exchange method. The server supports these methods: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256 No compatible hostkey. The server supports these methods: ssh-ed25519

增加配置

 cat >>/etc/ssh/sshd_config <<-EOF KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 EOF systemctl restart sshd

3.安全扫描合规