<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>openssh相关文章列表 | 皇家元林</title>
	<atom:link href="https://hjyl.org/tags/openssh/feed/" rel="self" type="application/rss+xml" />
	<link>https://hjyl.org</link>
	<description>刘元林的个人博客</description>
	<lastBuildDate>Thu, 29 Aug 2024 01:28:52 +0000</lastBuildDate>
	<language>zh-Hans</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>

<image>
	<url>https://img.hjyl.org/uploads/2019/10/cropped-about-me-32x32.png</url>
	<title>openssh相关文章列表 | 皇家元林</title>
	<link>https://hjyl.org</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>差点&#8230;废了</title>
		<link>https://hjyl.org/web-bugs-break-rules-or-against-law/</link>
					<comments>https://hjyl.org/web-bugs-break-rules-or-against-law/#comments</comments>
		
		<dc:creator><![CDATA[皇家元林]]></dc:creator>
		<pubDate>Wed, 28 Aug 2024 16:35:47 +0000</pubDate>
				<category><![CDATA[元林手札]]></category>
		<category><![CDATA[openssh]]></category>
		<category><![CDATA[openssl]]></category>
		<category><![CDATA[网站漏洞]]></category>
		<category><![CDATA[网络安全法]]></category>
		<guid isPermaLink="false">https://hjyl.org/?p=5292</guid>

					<description><![CDATA[....................................................... [&#8230;]]]></description>
										<content:encoded><![CDATA[
<p>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................</p>



<p>这次只有一个问题——OpenSSH &lt; 9.8 RCE.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................</p>



<p>还好今天这个问题解决很简单，只需要升级openssh到最新版本就可以了。</p>



<p>奈何我强迫症啊，升级控啊，手贱啊！差点把服务器干废了，ssh都连不上了，导致今晚网站服务挂了三个多小时。openssh和openssl是相关联的，看到openssl都到了3.3.0版本了，我就忍不住想升级。不出意外的意外出现了，“/lib/x86_64-linux-gnu/libcrypto.so.3 not found”，于是乎我直接从openssl安装包里复制一个出来“cp libcrypto.so.3 /lib/x86_64-linux-gnu/libcrypto.so.3”，就从这开始问题一波接一波，接着我又试图卸载“libssl-dev，libssl3”，不卸载还好，卸完更糟糕了，系统都出问题了。apt安装出现“dpkg returned an error code”的问题。此时脑瓜子嗡嗡的，都有重装系统的想法了，想想重装系统加配置环境可能一晚上不睡觉都解决不完，还好没有放弃，最后还是找到解决方法（详细可以见<a href="https://hjyl.org/go/aHR0cHM6Ly9oaWxhdS5jb20vWUxWeHhRZFRCRG1HLw==" rel="nofollow" target="_blank">此贴</a>）。</p>



<figure class="wp-block-image size-full"><img fetchpriority="high" decoding="async" width="2560" height="1920" src="https://img.hjyl.org/uploads/2024/08/20240828231520-scaled.jpg"  class="wp-image-5294" srcset="https://img.hjyl.org/uploads/2024/08/20240828231520-scaled.jpg 2560w, https://img.hjyl.org/uploads/2024/08/20240828231520-1536x1152.jpg 1536w, https://img.hjyl.org/uploads/2024/08/20240828231520-2048x1536.jpg 2048w" sizes="(max-width: 2560px) 100vw, 2560px" title="20240828231520 scaled.jpg" alt="20240828231520 scaled.jpg" /><figcaption class="wp-element-caption">这么多屏幕看哪个好？</figcaption></figure>



<p>皇天不负有心人啊！然后再反操作一番，把刚才卸载的东西又给装回去了，嘿嘿，又好了！不折腾了，不敢折腾了，openssl暂时不升级了。即使折腾也得先在虚拟机里试一试，没问题才能在生产环境里应用。后面我想尽快搞定用系统apt的方式搭建环境，apt速度很快，就是配置麻烦了一些，这方面可以参考lnmp和宝塔。然后把我的笔记本用起来，作为备用环境，如果小主机环境干废了，可以迅速转移到笔记本上。</p>



<p>That's All！不知不觉又熬夜了，嗯，赶紧睡了。</p>
<div id="content-copyright"><span style="font-weight:bold;text-shadow:0 1px 0 #ddd;font-size: 13px;">版权声明: </span><span style="font-size: 13px;">本文采用 <a href="https://hjyl.org/go/aHR0cHM6Ly9jcmVhdGl2ZWNvbW1vbnMub3JnL2xpY2Vuc2VzL2J5LW5jLXNhLzMuMC8=" rel="nofollow" target="_blank">BY-NC-SA</a> 协议进行授权，如无注明均为原创，转载请注明转自 <a href="https://hjyl.org">皇家元林</a><br>本文链接: <a rel="bookmark" title="差点&#8230;废了" href="https://hjyl.org/web-bugs-break-rules-or-against-law/">差点&#8230;废了</a></span></div>]]></content:encoded>
					
					<wfw:commentRss>https://hjyl.org/web-bugs-break-rules-or-against-law/feed/</wfw:commentRss>
			<slash:comments>22</slash:comments>
		
		
			</item>
	</channel>
</rss>
