Linux—升级openssh常见的问题与解决方案

1.ssh时报错WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!

具体报错信息：

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!

Someone could be eavesdropping on you right now (man-in-the-middle attack)!

It is also possible that a host key has just been changed.

The fingerprint for the ED25519 key sent by the remote host is

SHA256:rsUbLyXFUzokBD7SLZZmxxxxxxxxx.

Please contact your system administrator.

Add correct host key in /home/skadmin/.ssh/known_hosts to get rid of this message.

Offending ECDSA key in /home/skadmin/.ssh/known_hosts:33

Host key for xxxxx has changed and you have requested strict checking.

Host key verification failed.

问题分析

服务器 xxx.xxx.xxx.xxx 发送的密钥和你本地 ~/.ssh/known_hosts 文件第 33 行记录的密钥 不一致

解决方式

删除旧的密钥记录

bash 复制代码

ssh-keygen -R xxx.xxx.xxx.xxx

2.查看openssl版本时报错openssl: error while loading shared libraries: libssl.so.3: cannot open shared object f

问题分析

表示 openssl 命令在运行时找不到所需的共享库文件 libssl.so.3。这通常是由于 OpenSSL 库未安装、版本不匹配或库路径配置问题导致的。

解决方式

bash 复制代码

#1.查询libssl.so.3的位置
find / -name libssl.so.3
#例如查出来是/usr/local/openssl3/lib64/libssl.so.3

#2.将上述libssl.so.3加入到系统库路径
ln -sf /usr/local/openssl3/lib64/libssl.so.3 /usr/lib64/libssl.so.3

3.安装OpenSSL报错Can't locate IPC/Cmd.pm in @INC (@INC contains: ...)

Can't locate IPC/Cmd.pm in @INC (@INC contains: /root/Downloads/openssl-3.0.1/util/perl /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 . /root/Downloads/openssl-3.0.1/external/perl/Text-Template-1.56/lib) at /root/Downloads/openssl-3.0.1/util/perl/OpenSSL/config.pm line 18.

BEGIN failed--compilation aborted at /root/Downloads/openssl-3.0.1/util/perl/OpenSSL/config.pm line 18.

Compilation failed in require at /root/Downloads/openssl-3.0.1/Configure line 23.

BEGIN failed--compilation aborted at /root/Downloads/openssl-3.0.1/Configure line 23.

问题分析

如果你用一个 Perl 写的部署脚本去升级 OpenSSL，而该脚本用了 IPC::Cmd 来执行命令，那么缺少这个模块会导致脚本本身失败，而不是 OpenSSL 编译失败。

解决方式

bash 复制代码

yum install -y perl perl-IPC-Cmd perl-Data-Dumper perl-Text-Template