起因Centos 7.9.2009 自带的OpenSSH版本太老了一堆漏洞。内网等保过不去上网找找最新版需要各种编译环境由于是内网不方便。百度编译好的RPM包各种收费吃相难看。索性自己编译了一套最新版使用boypt提供的openssh-rpms编译脚本。版本说明2026-07-17 原作者已提供RPM包这里偷个懒直接搬运了OpenSSH v10.4p1_b11, OpenSSL v3.5.82026-05-24 同步编译最新版本OpenSSH v10.3p1, OpenSSL v3.5.6# ssh -V /sbin/sshd -V OpenSSH_10.3p1, OpenSSL 3.5.6 7 Apr 2026 OpenSSH_10.3p1, OpenSSL 3.5.6 7 Apr 20262025-10-15 同步编译最新版本OpenSSH v10.2p1, OpenSSL v3.0.182025-05-12 同步编译最新版本OpenSSH v10.0p2, OpenSSL v3.5.02025-03-15 同步编译最新版本OpenSSH v9.9p2, OpenSSL v3.4.1使用2024-08-21编译时最新的版本OpenSSH_9.8p1, OpenSSL 3.3.1安装方法请先打开至少2个SSH窗口并在其中一个操作另外一个用于升级失败回退重启SSHD服务前需要修改/etc/ssh/sshd_config配置文件看看是否适合自己的使用环境#如是否需要修改端口号、禁用DNS等# 解压到某个目录里# 备份当前SSH配置[[-f/etc/ssh/sshd_config]]mv/etc/ssh/sshd_config /etc/ssh/sshd_config.$(date%Y%m%d)# 安装rpm包yum localinstall-y*.rpm# 以防主机密钥文件的权限过于开放导致服务起不来chmod-v600/etc/ssh/ssh_host_*_key# For CentOS7:# 在某些情况下以前安装的systemd服务文件在升级后还留在磁盘上。if[[-d/run/systemd/system-f/usr/lib/systemd/system/sshd.service]];thenmv/usr/lib/systemd/system/sshd.service /usr/lib/systemd/system/sshd.service.$(date%Y%m%d)systemctl daemon-reloadfi# Check Installed version:# 检查安装后的版本ssh-V/usr/sbin/sshd-V# Restart service# 重启服务servicesshd restart安装演示[rootlocalhost x86_64]# ssh -V /sbin/sshd -VOpenSSH_10.2p1, OpenSSL3.0.1830Sep2025OpenSSH_10.2p1, OpenSSL3.0.1830Sep2025[rootlocalhost x86_64]# yum localinstall -y *.rpmLoaded plugins: fastestmirror, product-id, search-disabled-repos, subscription-manager This system is not registered with an entitlement server. You can use subscription-manager to register. Examining openssh-10.3p1-1.el7.x86_64.rpm: openssh-10.3p1-1.el7.x86_64 Marking openssh-10.3p1-1.el7.x86_64.rpm as an update to openssh-10.2p1-1.el7.x86_64 Examining openssh-clients-10.3p1-1.el7.x86_64.rpm: openssh-clients-10.3p1-1.el7.x86_64 Marking openssh-clients-10.3p1-1.el7.x86_64.rpm as an update to openssh-clients-10.2p1-1.el7.x86_64 Examining openssh-server-10.3p1-1.el7.x86_64.rpm: openssh-server-10.3p1-1.el7.x86_64 Marking openssh-server-10.3p1-1.el7.x86_64.rpm as an update to openssh-server-10.2p1-1.el7.x86_64 Resolving Dependencies --Running transaction check ---Package openssh.x86_640:10.2p1-1.el7 will be updated ---Package openssh.x86_640:10.3p1-1.el7 will be an update ---Package openssh-clients.x86_640:10.2p1-1.el7 will be updated ---Package openssh-clients.x86_640:10.3p1-1.el7 will be an update ---Package openssh-server.x86_640:10.2p1-1.el7 will be updated ---Package openssh-server.x86_640:10.3p1-1.el7 will be an update --Finished Dependency Resolution Dependencies ResolvedPackage Arch Version Repository SizeUpdating: openssh x86_6410.3p1-1.el7 /openssh-10.3p1-1.el7.x86_6421M openssh-clients x86_6410.3p1-1.el7 /openssh-clients-10.3p1-1.el7.x86_6421M openssh-server x86_6410.3p1-1.el7 /openssh-server-10.3p1-1.el7.x86_6416M Transaction SummaryUpgrade3Packages Total size:59M Downloading packages: Running transaction check Running transactiontestTransactiontestsucceeded Running transaction Warning: RPMDB altered outside of yum. Updating:openssh-10.3p1-1.el7.x86_641/6 Updating:openssh-server-10.3p1-1.el7.x86_642/6 Updating:openssh-clients-10.3p1-1.el7.x86_643/6 Cleanup:openssh-clients-10.2p1-1.el7.x86_644/6 Cleanup:openssh-server-10.2p1-1.el7.x86_645/6 Cleanup:openssh-10.2p1-1.el7.x86_646/6 Verifying:openssh-server-10.3p1-1.el7.x86_641/6 Verifying:openssh-10.3p1-1.el7.x86_642/6 Verifying:openssh-clients-10.3p1-1.el7.x86_643/6 Verifying:openssh-10.2p1-1.el7.x86_644/6 Verifying:openssh-clients-10.2p1-1.el7.x86_645/6 Verifying:openssh-server-10.2p1-1.el7.x86_646/6 base/7/x86_64|3.6kB 00:00:00 copr:copr.fedorainfracloud.org:konimex:neofetch/x86_64|3.3kB 00:00:00 docker-ce-stable/7/x86_64|3.5kB 00:00:00 epel/x86_64|4.3kB 00:00:00 extras/7/x86_64|2.9kB 00:00:00 updates/7/x86_64|2.9kB 00:00:00 Updated: openssh.x86_640:10.3p1-1.el7 openssh-clients.x86_640:10.3p1-1.el7 openssh-server.x86_640:10.3p1-1.el7 Complete![rootlocalhost x86_64]# ssh -V /sbin/sshd -VOpenSSH_10.3p1, OpenSSL3.5.67Apr2026OpenSSH_10.3p1, OpenSSL3.5.67Apr2026[rootlocalhost x86_64]# dateSun May2423:38:30 CST2026下载地址CentOS7OpenSSH v10.3p1 OpenSSL v3.5.6https://sbdx.lanzouu.com/ix7rw3qa1ydi密码:1024OpenSSH v10.2p1 OpenSSL v3.0.18https://sbdx.lanzouu.com/iRQq738fbcid密码:1024OpenSSH v10.0p2 OpenSSL v3.5.0https://sbdx.lanzouu.com/i52UM2w24i2b 密码:1024OpenSSH_9.9p2 OpenSSL 3.4.1https://sbdx.lanzouu.com/ir5bl2qxia5a 密码:1024OpenSSH_9.8p1 OpenSSL 3.3.1https://sbdx.lanzouj.com/ib6x628ef5rc 密码:1024CentOS6OpenSSH_9.8p1 OpenSSL 3.3.1https://sbdx.lanzouj.com/iejvx28feqsj 密码:1024原作者发布的github自动编译版本仅作搬运其他版本也在目录里自行挖掘openssh-v10.4p1_b11https://sbdx.lanzouu.com/b00g4c91mb 密码:1024感谢感谢boypt提供的仓库 https://github.com/boypt/openssh-rpms实现一键编译成RPM包。