Embeded linux之移植ssh.doc

Embeded linux之移植ssh一、源码包下载：zlib官方下载：http:/zlib/openssl官方下载：http:/openssl/sourceopenssh官网下载：http:/openssh/portablel本文使用版本：zlib-1.2.3openssl-0.9.8lopenssh-7.1p2下面链接有已上传的配置好的源码包http:/filesblogs/files/pokerface/zlib-1.2.3.tar.gzhttp:/filesblogs/files/pokerface/openssl-0.9.8l.tar.gzhttp:/filesblogs/files/pokerface/openssh-7.1p2.tar.gz二、创建工作目录安装路径：/opt/ssh/install/源码路径：/opt/ssh/source/压缩包路径：/opt/ssh/tmp/三、编译安装zlib1.修改Makefile :增加CROSS=arm-linux-CC=gcc 改为 CC=$(CROSS)gcc确保 LDSHARED=CC确保 CPP=CC - EAR= ar rc 改为 AR=$(CROSS) ar rcprefix = /opt/ssh/install/2.编译：make3.安装：make install 四、编译安装openssl1.配置./Configure -prefix=/opt/ssh/install/openssl os/compiler:arm-linux-gcc2.编译make3.安装make install五、编译openssh1.配置./configure -host=arm-linux -with-libs -with-zlib=/opt/ssh/install/zlib-1.2.3/ -with-ssl-dir=/opt/ssh/install/openssl-0.9.8/ -disable-etc-default-login CC=arm-linux-gcc AR=arm-linux-ar2.编译make3.将生成软件放到目标板对应目录cp scp sftp ssh ssh-add ssh-agent ssh-keygen ssh-keyscan /opt/filesystem/imx6/rootfs/usr/local/bin/cp moduli ssh_config sshd_config /opt/filesystem/imx6/rootfs/usr/local/cp moduli ssh_config sshd_config /opt/filesystem/imx6/rootfs/usr/local/etc/cp sftp-server ssh-keysign /opt/filesystem/imx6/rootfs/usr/libexec/cp sshd /opt/filesystem/imx6/rootfs/usr/sbin/chmod 777 /opt/filesystem/imx6/rootfs/usr/local/bin/*chmod 777 /opt/filesystem/imx6/rootfs/usr/sbin/*六、生成密钥文件ssh-keygen -t rsa -f ssh_host_rsa_key -N ""ssh-keygen -t dsa -f ssh_host_dsa_key -N ""ssh-keygen -t ecdsa -f ssh_host_ecdsa_key -N ""ssh-keygen -t dsa -f ssh_host_ed25519_key -N ""chmod 600 ssh_host_ed25519_keycp ssh_host_* /opt/filesystem/imx6/rootfs/usr/local/etc/七、修改ssh配置文件1. /usr/local/sshd_config,将PermitRootLogin yes前的注释“#”号去掉。2. /etc/passwd 文件，在最后添加下面这一行：sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin3.如果开发板的 root 用户还没有密码，键入以下命令然输入两次密码来修改，否其他设备无法连：passwd root 4.将sshd加入开机启动项修改/etc/init.d/rcS增加/usr/sbin/sshd 八、软件远程登录如果出现找不到匹配的outgoing encryption算法问题出现在xshell版本太低，没有相应加密算法，更换新的就行了，我用的xshell5，xshell3就不支持最新sshd加密POD document had syntax errors at /usr/bin/pod2man line 71.问题出现在由于OpenSSL 1.0.1e 与 perl5.18 不兼容，删除 pod2man文件：sudo rm /usr/bin/pod2mancp: cannot create regular file openssl/include/openssl/crypto.h: No such file or directory问题出现在由于配置时使用了相对路径，改为绝对路径就可以了