Topic: Upgrading to OpenSSL 1.0.0e

[steelz09]

I have a ssl server web server configuration of the following:

1) Apache 2.2.21
2) OpenSSL 0.9.8.r
3) Windows 2008 R2

I downloaded the .msi install for openssl 1.0.0e and installed using the default settings.

However, I noticed that Apache\bin has openssl.exe, ssleay32.dll, libeay32.dll, openssl.cnf, etc.... and it must be from my older version because...

I open openssl.exe. in the Apache\bin directory and type "version" and it says OpenSSL 0.9.8.r

How do I finish the upgrade? Do I need to overwrite these "old" files?

Help would be GREATLY appreciated.

[Steffen]

Question not quite clear, but I give it a try.

Be careful to mix Apache with 0.9.8r and 1.0.0e

Where did you downloaded the old Apache ?

Where did you downloaded the new Apache and/or Openssl ?

Best is to download Apache 2.2.21 with openssl 1.0.0e from here and just overwrite all the files, except your changed conf files.

Steffen

[steelz09]

I download apache 2.2.21 w/ from httpd.apache.org:

I uninstalled my 2.2.19 which was successful and installed the new version:

Win32 Binary including OpenSSL 0.9.8r (MSI Installer): httpd-2.2.21-win32-x86-openssl-0.9.8r.msi

I now need to upgrade openssl from 0.9.8r to 1.0.0e.

I downloaded the windows binary from openssl's recommended site:

http://www.slproweb.com/products/Win32OpenSSL.html

I installed the OpenSSL 1.0.0e 64bit version.

My questions is:

What else do I need to do? There are openssl.exe, .dll files etc that seem to be from the 0.9.8r installation in my Apache\bin directory. Why are they there and should I remove overwrite them with the new openssl installation files located in the following directory:

D:\OpenSSL-64bit

[Steffen]

As stated above, be careful to mix an Apache with 0.9.8r and 1.0.0e

You cannot mix Apache 32 with 64 openssl.
You cannot mix Apache from apache.org (is VC6) with stuff build with VC9 (like from here)

Bottom line is use a Apache 2.2.21 build with openssl 1.0.0.e, like from here.

Advised:
just download Apache 2.2.21 from here with openssl 1.0.0e and overwrite all the files, except the config files. Your choise to download and install a 32 or a 64.

Steffen