Upgrading SSH and SSHD

ahingert · 11-08-2010, 01:17 PM

Hi,
I am seeing a funny thing: there is a version difference when I run "sshd -v" and when I run "ssh -v" and I hope some of the experts here can clear this up for me.

But let me start from the beginning. After a PCI compliance scan I was told I needed to "Upgrade to OpenSSH 5.0 o later, available from the OpenSSH download site".

As such I run the following code on my server:

Code:

wget ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-5.6p1.tar.gz
tar -xvzf openssh-5.6p1.tar.gz
/root/openssh-5.6p1/configure
make
make install
/etc/init.d/sshd restart

After restarting the server I however get two different versions and...

Code:

# sshd -v
OpenSSH_5.6p1, OpenSSL 1.0.0a-fips 1 Jun 2010

Code:

# ssh -v
OpenSSH_4.5p1, OpenSSL 1.0.0a-fips 1 Jun 2010

...unfortunately the PCI compliancy scan will not let me pass without this upgrade.

Any ideas?

Thanks,
Adrien

macemoneta · 11-08-2010, 02:30 PM

It looks like you didn't uninstall the old versions first, and the old ssh client is earlier in the search PATH than the new client. Also, most Linux distributions have package management. Why wouldn't you install the newer version from the distribution repositories?

ahingert · 11-10-2010, 01:45 PM

Hi Macemoneta, thanks for your reply.
I solved, by reinstalling the whole OS.

How would I unsinstall SSHD without locking myself out?

The reason I did not use yum is that it was updated only to version 4.5

Adrien

ahingert · 11-10-2010, 01:45 PM

Hi Macemoneta, thanks for your reply.
I solved, by reinstalling the whole OS.

How would I unsinstall SSHD without locking myself out?

The reason I did not use yum is that it was updated only to version 4.5

Adrien

macemoneta · 11-10-2010, 02:18 PM

SSHD wasn't the problem from your information, the ssh-client was. You only needed to update the openssh-clients.

If yum was only providing the 4.5 version of ssh, then you were using a very old unsupported release, and need to upgrade.