CentOS7编译生成openssl和openssh RPM包教程

Name:           openssl
Version:        1.1.1w
Release:        1.el7
Summary:        A general purpose cryptography library with TLS implementation

Group:          System Environment/Libraries
License:        OpenSSL
URL:            https://www.openssl.org/
Source0:        https://www.openssl.org/source/%{name}-%{version}.tar.gz

BuildRequires:  gcc make perl-ExtUtils-MakeMaker zlib-devel
Requires:       zlib

%description
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and protocols.

%prep
%setup -q

%build
./config --prefix=/usr --libdir=/usr/lib64 --shared zlib-dynamic
make

%install
make DESTDIR=%{buildroot} install
install -d %{buildroot}/etc/pki/tls/certs
install -d %{buildroot}/etc/pki/tls/private

%files
%defattr(-,root,root)
/usr/bin/openssl
/usr/include/openssl/
/usr/lib64/libcrypto.so.*
/usr/lib64/libssl.so.*
/usr/lib64/engines/
/usr/share/man/man1/openssl.1*
/etc/pki/tls/certs
/etc/pki/tls/private

%post -p /sbin/ldconfig

%postun -p /sbin/ldconfig

%changelog
* Wed Aug 27 2025 Your Name <your@email.com> 1.1.1w-1.el7
- Initial build of OpenSSL 1.1.1w

Name:           openssh
Version:        8.9p1
Release:        1.el7
Summary:        An open source implementation of SSH protocol versions 1 and 2

Group:          Applications/Internet
License:        BSD
URL:            http://www.openssh.com/portable.html
Source0:        http://openbsd.org/pub/OpenBSD/OpenSSH/portable/%{name}-%{version}.tar.gz
Patch0:         openssh-8.8p1-openssl-1.1.1.patch

BuildRequires:  openssl-devel pam-devel zlib-devel libselinux-devel
BuildRequires:  krb5-devel libX11-devel libXt-devel gtk2-devel libedit-devel
Requires:       openssh-clients = %{version}-%{release}
Requires:       openssh-server = %{version}-%{release}

%description
SSH (Secure SHell) is a program for logging into and executing commands on
a remote machine. SSH is intended to replace rlogin and rsh, and to provide
secure encrypted communications between two untrusted hosts over an insecure
network. X11 connections and arbitrary TCP/IP ports can also be forwarded
over the secure channel.

%package clients
Summary:        An open source implementation of SSH protocol clients
Group:          Applications/Internet
Requires:       openssh = %{version}-%{release}

%description clients
OpenSSH clients are applications that allow you to log into another
machine and execute commands on that machine.

%package server
Summary:        An open source implementation of SSH protocol server
Group:          System Environment/Daemons
Requires:       openssh = %{version}-%{release}
Requires:       initscripts >= 7.73
Requires(post): chkconfig
Requires(preun): chkconfig, initscripts

%description server
OpenSSH server is a program for logging into and executing commands on
a remote machine. It is intended to replace rlogind and rshd.

%prep
%setup -q
%patch0 -p1

%build
%configure \
    --sysconfdir=/etc/ssh \
    --libexecdir=/usr/libexec/openssh \
    --with-md5-passwords \
    --with-pam \
    --with-zlib \
    --with-ssl-engine \
    --with-selinux \
    --with-kerberos5 \
    --with-xauth=/usr/bin/xauth \
    --with-gssapi

make

%install
make DESTDIR=%{buildroot} install

# 安装服务脚本
install -D -m 0755 contrib/redhat/sshd.init %{buildroot}/etc/init.d/sshd
install -D -m 0644 contrib/redhat/sshd.pam %{buildroot}/etc/pam.d/sshd

# 创建必要的目录
mkdir -p %{buildroot}/var/empty/sshd
chmod 700 %{buildroot}/var/empty/sshd

# 清理不需要的文件
rm -f %{buildroot}/etc/ssh/ssh_host_*_key*

%files
%defattr(-,root,root)
%doc README LICENSE
%config(noreplace) /etc/ssh/ssh_config
%{_bindir}/ssh-keygen
%{_mandir}/man1/ssh-keygen.1*
%{_mandir}/man5/ssh_config.5*

%files clients
%defattr(-,root,root)
%{_bindir}/scp
%{_bindir}/sftp
%{_bindir}/ssh
%{_bindir}/slogin
%{_libexecdir}/openssh/sftp-server
%{_mandir}/man1/scp.1*
%{_mandir}/man1/sftp.1*
%{_mandir}/man1/ssh.1*
%{_mandir}/man8/sftp-server.8*

%files server
%defattr(-,root,root)
%config(noreplace) /etc/ssh/sshd_config
%config(noreplace) /etc/pam.d/sshd
/etc/init.d/sshd
%{_sbindir}/sshd
%{_libexecdir}/openssh/ssh-keysign
%{_mandir}/man5/sshd_config.5*
%{_mandir}/man8/sshd.8*
%{_mandir}/man8/ssh-keysign.8*
/var/empty/sshd

%post server
/sbin/chkconfig --add sshd
if [ -x /usr/bin/systemctl ]; then
    /usr/bin/systemctl try-restart sshd.service >/dev/null 2>&1 || :
else
    /sbin/service sshd condrestart >/dev/null 2>&1 || :
fi

%preun server
if [ "$1" = 0 ]; then
    if [ -x /usr/bin/systemctl ]; then
        /usr/bin/systemctl stop sshd.service >/dev/null 2>&1 || :
        /usr/bin/systemctl disable sshd.service >/dev/null 2>&1 || :
    else
        /sbin/service sshd stop >/dev/null 2>&1 || :
        /sbin/chkconfig --del sshd
    fi
fi

%changelog
* Wed Aug 27 2025 Your Name <your@email.com> 8.9p1-1.el7
- Initial build of OpenSSH 8.9p1