How to upgrade OpenSSL to 3.1.4

[Alan Flores]

CISA came out that OpenSSL aversion 3.1.3 is vulnerable. I want to upgrade to 3.1.4(current version) but since we are running windows we need OpenSSl bundled already with Apache. On Apache Lounge, they have not updated the OpenSSL on the Apache(2.4.58 - win 64) bundle. Is there somewhere else I can get this? Is there a way to update OpenSSL on it's own?

[Mariano Hernandez]

Hello, I do this

1. Download new version in FireDaemon-OpenSSL-x64-3.1.4.exe 

2. Stop services httpd

3. Replace in folder Apache24\bin the next files:

libcrypto.dll

libssl-3.dll

openssl.exe

4. restart services httpd

[Dave Kardos]

This worked for me. Thanks for the suggesting! A couple of notes to help others.

1. Download the new version as a zip (instead of .exe) from https://kb.firedaemon.com/support/solutions/articles/4000121705-openssl-3-1-3-0-and-1-1-1-binary-distributions-for-microsoft-windows
2. Place files libcrypto-3-x64.dll, libssl-3-x64.dll and openssl.exe in folder Apache24\bin.

[Mariano Hernandez]

I have the same trouble, somebody know, how to fixed?