redhat 4.8 升级openssh 6.6 报错
现象：提示OpenSSL version mismatch. Built against 1000000f, you have信息，
whereis sshd
ssh:/usr/local/sshd
发现 该sshd 的路径跟 正常的 as 4.8 的路径不一样:sshd: /usr/sbin/sshd
登陆进去，发现sshd的路径为/usr/local/sbin/sshd,现在已改为/usr/sbin/sshd，现可正常登陆
more /etc/init.d/sshd
RETVAL=0
prog="sshd"
# Some functions to make the below more readable
KEYGEN=/usr/bin/ssh-keygen
SSHD=/usr/sbin/sshd
RSA1_KEY=/etc/ssh/ssh_host_key
RSA_KEY=/etc/ssh/ssh_host_rsa_key
DSA_KEY=/etc/ssh/ssh_host_dsa_key
PID_FILE=/var/run/sshd.pid
修改 SSHD=为正常的 调用脚本路径、
#######################
ssh版本为 OpenSSH_4.3p2 升级时报错 configure: error: PAM headers not found
装了zlib-devel ，pam-devel包后，升级成功。
###########################
现象：编译报错c_zlib.c error: BIO_ZLIB_CTX has no member
处理结果：装了zlib-devel ，pam-devel包后，升级成功。
######################
现象：编译报错c_zlib.c error: BIO_ZLIB_CTX has no member，装了zlib-devel和pam-devel编译安装成功，
执行service sshd restart时报错：
Starting sshd: /usr/sbin/sshd: error while loading shared libraries:
libcrypto.so.1.0.0: failed to map segment from shared object: Permission denied
关闭selinux后，ssh正常
#######################
升级openssl
which openssl
/usr/bin/openssl
1.wget http://www.openssl.org/source/openssl-1.0.1c.tar.gz
2.tar zxvf openssl-1.0.1c.tar.gz
3.cd openssl-1.0.1c
4../config --prefix=/usr
5.make && make test && make install
1.checking whether getpgrp requires zero arguments... yes
2.checking OpenSSL header version... 1000103f (OpenSSL 1.0.1c 10 May 2012)
3.checking OpenSSL library version... 90802f (OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008)
4.checking whether OpenSSL‘s headers match the library... no
5.configure: error: Your OpenSSL headers do not match your
6.library. Check config.log for details.
7.If you are sure your installation is consistent, you can disable the check
8.by running "./configure --without-openssl-header-check".
9.Also see contrib/findssl.sh for help identifying header/library mismatches.
会无法正常运行
1.ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
2.OpenSSL version mismatch. Built against 1000103f, you have 90802f
需带上 --shared参数 否则会出现头文件和库文件不匹配，重新解压openssl.tar.gz ，然后带上--shared编译
3.cd openssl-1.0.1c
4../config --prefix=/usr --shared
#################################################################################
安装openssl 后无法找到 libcrypto.so.1.0.0
/usr/local/openssl/lib/libcrypto.so.1.0.0
编译前
将CentOS 5.8编译的/usr/local/openssl/lib/libcrypto.so拷贝到/lib目录下
suse 11 升级 6.7 报错，加上语句
if [ -f /lib/libcrypto.so.1.0.0 ];then
echo "libcryto.so.1.0.0 is in !"
else
cp libcrypto.so.1.0.0 /lib/libcrypto.so.1.0.0
ln -s /lib/libcrypto.so.1.0.0 /lib/libcrypto.so
fi
本文出自 “笨鸟先飞” 博客，请务必保留此出处http://2574526.blog.51cto.com/2564526/1598997
原文地址：http://2574526.blog.51cto.com/2564526/1598997
