Why openssl for Windows xampp 5.6.21 is not updated?

[jackharry]

Background
The following extract from https://www.apachefriends.org/blog/new_xampp_20160512.html
Xampp 5.5.35 / 5.6.21 / 7.0.6
Updated PHP to 5.5.35 / 5.6.21 / 7.0.6
Updated OpenSSL to 1.0.2h for OS X and Linux

Problem
There is no mention that OpenSSL is updated to 1.0.2h for Windows version.
Also, upon download the portable version of xampp 5.6.21 to check the OpenSSL version, it is also not 1.0.2h. It is still 1.0.2d.

Question
May I know when will OpenSSL be updated to 1.0.2h for Windows version?
Also, are there any other ways to update the OpenSSL to 1.0.2h for Xampp?

Thank you.

Regards,
Xampp (Windows) Supporter

[gsmith]

5 days ago
https://www.apachefriends.org/blog/new_ ... 60512.html

[Altrea]

Hi,

Also, are there any other ways to update the OpenSSL to 1.0.2h for Xampp?

Yes, you can search for a binary of OpenSSL and replace the XAMPP SSL files with them.
Currently i know only one trusted source for up to date OpenSSL binaries:
https://indy.fulgan.com/SSL/

best wishes,
Altrea

[gsmith]

Currently i know only one trusted source for up to date OpenSSL binaries:
https://indy.fulgan.com/SSL/

Just curious why there? All all Apache's in xampp have been coming from Apache Lounge for a couple years now.

[Sat May 14 13:38:59.451954 2016] [mpm_winnt:notice] [pid 1012:tid 528] AH00456: Apache Lounge VC11 Server built: Oct 13 2015 10:54:13

I would assume by this that Apache Lounge should also be a "trusted" source. Just download the latest 2.4 VC11 build and replace openssl.exe, libeay32.dll & ssleay32.dll files from the new zip file.
https://www.apachelounge.com/download/VC11/

[Altrea]

Just curious why there? All all Apache's in xampp have been coming from Apache Lounge for a couple years now.

Yes, you are absolutely correct. Apache Lounge is also a trusted source.
Apache Lounge don't provide OpenSSL binaries as single downloads, thats the only reason i didn't mentioned it.