openssl心脏出血漏洞修复
本帖最后由 康小泡 于 2016-9-7 17:53 编辑#!/bin/bash
for ip in `cat iplist`
do
scp -P22 openssl-1.0.1t.tar.gz 192.168.1.$ip:/home/test
scp -P 22 ssl.sh 192.168.1.$ip:/home/test
ssh -p 22 -t 192.168.1.$ip "sudo sh /home/test/ssl.sh"
done
#!/bin/bash
yum clean all
yum makecache
yum -y install glibc* cpp gcc* make zlib
cd /home/test
tar zxf openssl-1.0.1t.tar.gz && cd openssl-1.0.1t
./config shared zlib
make && make install
cd /usr/local/ssl/
./bin/openssl version
mv /usr/bin/openssl /usr/bin/openssl.old
mv /usr/include/openssl /usr/include/openssl.old
cp /usr/local/ssl/bin/openssl /usr/bin/openssl
cp -r /usr/local/ssl/include/openssl/ /usr/include/openssl
echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
ldconfig
ldconfig -v|grep ssl
v=`openssl version | awk '{print $2}'`
[ $v = "1.0.1t" ] && echo update OK || echo update fail
exit 1
页:
[1]