Cannot get latest version of SSH to install

[trackpads]

For some reason when I tell CPanel to upgrade the OpenSSH to the latest it only downloads the 3.6 rpm. Any way to make it download the latest?

Thanks again,

-Jason

 

[mooseontheloose]

do it from source

cd /usr/local/src
wget ftp://mirror.sg.depaul.edu/pub/OpenBSD/OpenSSH/portable/openssh-3.8.1p1.tar.gz
tar zxvf openssh-3.8.1p1.tar.gz
cd openssh-3.8.1p1
./configure --prefix=/usr --sysconfdir=/etc/ssh
make
make install


then restart sshd

/etc/init.d/sshd restart
or
service sshd restart

verify it upgraded
ssh -V

 

[mickalo]

any known compatibility issues, problems, with the lastest Cpanel builds, and/or Linux RH7.3 or 9.0 ??

TIA
Mickalo

 

[mooseontheloose]

Originally posted by mickalo
any known compatibility issues, problems, with the lastest Cpanel builds, and/or Linux RH7.3 or 9.0 ??

TIA
Mickalo

cpanel does not depend on ssh for much of anything

no :p

 

[mickalo]

Originally posted by mooseontheloose
cpanel does not depend on ssh for much of anything

no :p

what does this error mean when restart sshd:

Starting sshd:Privilege separation user sshd does not exist

apparently there ARE some conflicts... I got locked out of the server, via ssh shell. I had to reinstall all the openssh RPM's in order to be able to get back into the server!!

Not sure what happened there!!

Mickalo

 

[mickalo]

after doing some searches on EV1 forums, there appears to be some correlation between OpenSSH and OpenSSL versions and compatibility issues. There's some good HOW-TO's but they're over a year old now and not sure they'd be accurate now.

Has anybody sucessfully upgraded OpenSSH and OpenSSL on a Cpanel box with RH, currently using OpenSSH_3.1p1 and OpenSSL OpenSSL 0.9.6b

TIA,
Mickalo

 

[chirpy]

Any particular reason that you need to upgrade openSSH? If you're running a support RedHat release the current rpms will have any security fixes back-ported into the version that is installed (for stability reasons).

 

[mickalo]

good point. was reading alot of security alerts regarding older versions of these, and was concerned, but it has been pointed out Cpanel keeps things patched quiet well.

Thx's
Mickalo

 

[trackpads]

I wanted to upgrade because I wasn having the "Corrupted MAC on Input" error when using SCP. But after I installed 3.8 it just got worse so I am going to roll back I think.

Thanks,

-Jason