Topic: Upgrading Openssl without touching existing running Apache ?

[shishir]

Hi,

I have installed Apache version 2.2.22 which comes by default openssl 0.9.8t.
I have downloaded the latest version of openssl "Win32 OpenSSL v1.0.0g" from

http://www.slproweb.com/products/Win32OpenSSL.html

I have installed it separately on different location.

Can body provide me the steps to integrate openssl 1.00g to the apache 2.2.22 ( to replace openssl 0.9.8t)?

Thanks,
Shishir

[glsmith]

No.

1. Your Apache's mod_ssl is linked to OpenSSL 0.9.8t, so when you try and use this 1.0.0g, it will crash Apache. That page says nothing about including mod_ssl.

2. I may be wrong here, but you downloaded your Apache from Apache.Org? If so, your Apache was built with VC6, not VC 2008 as that OpenSSL you got from that link is. Now you're mixing two different version of msvcrt.dlls. This often has a disastrous outcome, for some people it works, others not.

If you want Apache 2.2.22 with OpenSSL 1.0.0g, you can get the entire package here, on the download page you will find them. You can find one as well with 0.9.8t even. The one thing is, the mod_ssl included in the package with 1.0.0g is built for 1.0.0g and you will not have the problem described in #1 above. It's also all built on VC2008 as well, so no possibility of the problem described in #2 above.

[shishir]

Thanks for clarifying the doubts.
I'll the version available here.