How to upgrade OpenSSL to 3.1.4

Question

CISA came out that OpenSSL aversion 3.1.3 is vulnerable. I want to upgrade to 3.1.4(current version) but since we are running windows we need OpenSSl bundled already with Apache. On Apache Lounge, they have not updated the OpenSSL on the Apache(2.4.58 - win 64) bundle. Is there somewhere else I can get this? Is there a way to update OpenSSL on it's own?

Dave Kardos · Answer

This worked for me. Thanks for the suggesting! A couple of notes to help others.

* Download the new version as a zip (instead of .exe) from https://kb.firedaemon.com/support/solutions/articles/4000121705-openssl-3-1-3-0-and-1-1-1-binary-distributions-for-microsoft-windows
* Place files libcrypto-3-x64.dll, libssl-3-x64.dll and openssl.exe in folder Apache24\bin.

Mariano Hernandez · Answer

Hello, I do this

1. Download new version in FireDaemon-OpenSSL-x64-3.1.4.exe

2. Stop services httpd

3. Replace in folder Apache24\bin the next files:

libcrypto.dll

libssl-3.dll

openssl.exe

4. restart services httpd

Mariano Hernandez · Answer

I have the same trouble, somebody know, how to fixed?