Forum Discussion

hbrooks2375's avatar
hbrooks2375
Copper Contributor
Nov 14, 2023

OpenSSL

We have the recommendation to update OpenSSL. However, we can not figure out how to actually do this. There seems to be no installed location of OpenSSL so how can we update this? I have found a few ...
microsoft defender for endpoint
remediation
TheGift73's avatar
TheGift73
Iron Contributor
Nov 17, 2023

We are facing the same situation and it seems that the version of OpenSSL that is used in various apps is hardcoded to the app itself, so even installing the latest version to users does nothing as the app won't try to use the latest version it can see available, but instead will only use the version that is included in the app.

An example of that is PowerBI Desktop install. We have hundreds of issues for this. Also, for OpenSSL 1.1.1 is now EOL, but we still have software that is still using that version even though the version of that software if fully up to date, so the issue is the software vendors as we are reliant of them to make these changes.

Annoyingly, as you say, there is no uninstall for the multiple versions of OpenSSL, unless you have explicitly installed it on a users machine via Winget or similar

https://wingetgui.com/apps/ShiningLight-OpenSSL

If any one does have a solution to this, please let people know.

Resources