LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 02-01-2022, 07:22 AM   #1
radwan1998
LQ Newbie
 
Registered: Feb 2022
Posts: 9
Blog Entries: 1

Rep: Reputation: 0
Unhappy Help! Downgrade openssh


I want to downgrade my openssh and openssl version on debian10/11 to this version

OpenSSH_7.4p1 Debian-10+deb9u7, OpenSSL 1.0.2u 20 Dec 2019.


Is it possible?!!

Please help , it is very important to my business.

Thanks

Last edited by radwan1998; 02-01-2022 at 07:23 AM.
 
Old 02-01-2022, 07:28 AM   #2
shruggy
Senior Member
 
Registered: Mar 2020
Posts: 3,670

Rep: Reputation: Disabled
Quote:
Originally Posted by radwan1998 View Post
OpenSSH_7.4p1 Debian-10+deb9u7, OpenSSL 1.0.2u 20 Dec 2019.
Those are the versions in Debian 9 Stretch (oldoldstable).

Downgrading might have very serious security implications. "Very important to my business" is not enough of a reason. Why are you trying this?

As to your question
Quote:
Originally Posted by radwan1998 View Post
Is it possible?!!
Not directly. Downgrading OpenSSL is not feasible because of the sheer number of packages that depend on it. But you can install libssl1.0 parallel to libssl1.1 and point to it software that requires the older version via LD_PRELOAD.

Depending on your situation, there may be better ways to achieve what you want.

Last edited by shruggy; 02-01-2022 at 08:46 AM.
 
2 members found this post helpful.
Old 02-01-2022, 08:22 AM   #3
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,553

Rep: Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946
Quote:
Originally Posted by radwan1998 View Post
I want to downgrade my openssh and openssl version on debian10/11 to this version

OpenSSH_7.4p1 Debian-10+deb9u7, OpenSSL 1.0.2u 20 Dec 2019.

Is it possible?!! Please help , it is very important to my business.
Agree with shruggy 100%; while you MIGHT be able to do such a thing, it has far reaching implications. And I'm not sure what 'business' you have that requires less security, or why you need this.

Clarify your needs and what you're actually trying to accomplish.
 
1 members found this post helpful.
Old 02-01-2022, 10:25 AM   #4
radwan1998
LQ Newbie
 
Registered: Feb 2022
Posts: 9

Original Poster
Blog Entries: 1

Rep: Reputation: 0
I need to do this, because I have a Website for VPN servers and I can't connect my VPS to my website because of the version of SSH.
Example. I can connect Debian-9 with my website, but Debian-10 or newer not.

That is why, I think the problem is from SSH version, because the SSH Client in my Website is for old version of ssh servers developed.
If somebody can help me , please do .

I can also pay for this

Thanks

Last edited by radwan1998; 02-01-2022 at 10:26 AM.
 
Old 02-01-2022, 10:32 AM   #5
Turbocapitalist
LQ Guru
 
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 7,258
Blog Entries: 3

Rep: Reputation: 3713Reputation: 3713Reputation: 3713Reputation: 3713Reputation: 3713Reputation: 3713Reputation: 3713Reputation: 3713Reputation: 3713Reputation: 3713Reputation: 3713
Quote:
Originally Posted by radwan1998 View Post
I can also pay for this
If you end up with an expired version of SSH server, it is almost certain you will end up paying for it sooner or later. It is a costly mistake which can be avoided by upgrading the client. It would be highly recommend to avoid such a situation.

Your client system almost certainly has a backports repository from which you can pull a more modern version of the SSH server client and then connect that way.

Last edited by Turbocapitalist; 02-01-2022 at 10:42 AM.
 
Old 02-01-2022, 10:38 AM   #6
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,553

Rep: Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946
Quote:
Originally Posted by radwan1998 View Post
I need to do this, because I have a Website for VPN servers and I can't connect my VPS to my website because of the version of SSH. Example. I can connect Debian-9 with my website, but Debian-10 or newer not.

That is why, I think the problem is from SSH version, because the SSH Client in my Website is for old version of ssh servers developed. If somebody can help me , please do. I can also pay for this
Why do you think this?? What is the actual error/message you get when trying to connect? What are you trying to connect FROM? Have you tried using verbose logging on ssh (see the man page), to see what's going on?

Also, if this is a new installation, your SSH identification may have changed. And this is a community forum...if you want to pay someone, there are other sites you can advertise the job on, otherwise you can provide information and we can help you to help yourself. If you'd like to pay someone, it's almost certain anyone here would want to be paid up front.
 
Old 02-01-2022, 11:10 AM   #7
radwan1998
LQ Newbie
 
Registered: Feb 2022
Posts: 9

Original Poster
Blog Entries: 1

Rep: Reputation: 0
Thanks for replying,
This is my website [removed] , and the users can create (ssh and vpn) accounts for free .
I use Debian 9 and Ubuntu 16, but unfortunately everything changes by the time. I think Debian-9 will stop, because new version come. The problem my web client doesn't accept Debian-10 or newer and I think because of ssh version. I tried to change SSH version of Debian-10 to same version of Debian-9 but I couldn't. I don't know, if there is any Trick to do that.

Last edited by rtmistler; 02-01-2022 at 02:02 PM. Reason: Removed link
 
Old 02-01-2022, 11:33 AM   #8
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by radwan1998 View Post
I need to do this, because ...
Then follow the advice given in post #2.
Despite all warnings, I might add.
 
Old 02-01-2022, 12:26 PM   #9
boughtonp
Senior Member
 
Registered: Feb 2007
Location: UK
Distribution: Debian
Posts: 3,573

Rep: Reputation: 2534Reputation: 2534Reputation: 2534Reputation: 2534Reputation: 2534Reputation: 2534Reputation: 2534Reputation: 2534Reputation: 2534Reputation: 2534Reputation: 2534
Quote:
Originally Posted by radwan1998 View Post
The problem my web client doesn't accept Debian-10 or newer and I think because of ssh version.
Fix your web client then!

 
Old 02-01-2022, 12:44 PM   #10
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,553

Rep: Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946
Quote:
Originally Posted by radwan1998 View Post
Thanks for replying,
This is my website [removed] , and the users can create (ssh and vpn) accounts for free .
I use Debian 9 and Ubuntu 16, but unfortunately everything changes by the time. I think Debian-9 will stop, because new version come. The problem my web client doesn't accept Debian-10 or newer and I think because of ssh version. I tried to change SSH version of Debian-10 to same version of Debian-9 but I couldn't. I don't know, if there is any Trick to do that.
*AGAIN*, you are still not providing any information. You were asked for logs/messages, and were advised to turn on verbose logging to see what the actual issue is. Just saying "doesn't accept" tells us nothing.

Doing what you want is an incredibly bad idea, and there is NO REASON to do it, period. You are, at some point, going to HAVE TO UPGRADE...do it now, rather than making an entire system insecure and unstable by trying to downgrade a critical component.

Last edited by rtmistler; 02-01-2022 at 02:02 PM.
 
Old 02-01-2022, 01:06 PM   #11
radwan1998
LQ Newbie
 
Registered: Feb 2022
Posts: 9

Original Poster
Blog Entries: 1

Rep: Reputation: 0
Thanks ��Guys ,

Actually I did it, I downgrade openssh version on my Debian-10 and it works great.

The openssh server depends on ssh client on the system, so I should downgrade both pakages and install libssl1.0.2 (ich changed the foleder /etc/apt on Debian10 with forder of Debian9)
Then it works fine.
In this way I can use a new system, but only old version of ssh I have to install.

Last edited by radwan1998; 02-01-2022 at 01:16 PM.
 
Old 02-01-2022, 02:05 PM   #12
rtmistler
Moderator
 
Registered: Mar 2011
Location: USA
Distribution: MINT Debian, Angstrom, SUSE, Ubuntu, Debian
Posts: 9,877
Blog Entries: 13

Rep: Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930
@radwan1998,

Welcome to LQ.

Glad you found a suitable solution.

The link you provided, while intended to support your question details, is also very close to advertising. Please avoid posting that or similar again, and the link has been edited out.

You also have the option of using Thread Tools to Mark your thread as Solved to indicate you arrived at a solution.
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: OpenSSH 7.5 Has Security Fixes, Removes OpenSSL 1.0 Support for Portable OpenSSH LXer Syndicated Linux News 0 03-21-2017 04:11 PM
How to convert openssh keys to openssh tectia format LittleMaster Linux - Server 1 11-17-2012 07:39 AM
LXer: Why a Distro-Provided OpenSSH is Better than a Third-Party OpenSSH LXer Syndicated Linux News 0 02-02-2011 07:50 AM
Downgrade OpenSSH...Help JediKnight2 Linux - Software 1 07-03-2004 08:02 PM
gcc downgrade: help required ludwig W Linux - Software 12 03-31-2003 02:09 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 07:19 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration