OpenSSH升级

wget -c https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.8p1.tar.gz

tar xf  openssh-8.8p1.tar.gz

cd  openssh-8.8p1


./configure --prefix=/usr/local/openssh --sysconfdir=/etc/ssh --with-ssl-dir=/usr/local/openssl --with-zlib=/usr/local/zlib --with-md5-passwords --without-hardening && make && make install
#
service sshd restart
#
sshd -V


echo "
HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa" >>/etc/ssh/sshd_config

openssh升级8.8后，旧的认证算法（特别是ssh-rsa）默认没有开启
旧版crt就有因为不支持新算法导致无法登陆
各种各样运维管理平台也一样
查看服务器日志

根据
openssh8.8 release文档：https://www.openssh.com/txt/release-8.8
添加ssh-rsa算法

HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa