The latest high-severity security holes also affect the version bundled with Icinga 2 on Windows. But a minor Icinga 2 version is not planned, yet. How to update OpenSSL on 64-bit systems?
%ProgramFiles%\ICINGA2\sbininto the Explorer’s address bar and hit enter.
libssl-1_1-x64.dlland select Properties.
- Under Details check the Product version. If it’s not affected, don’t touch the running system. Otherwise proceed.
- Navigate here, download and install the Win64 OpenSSL v1.1 MSI.
- Locate the newly installed DLLs, e.g. by searching for libssl-1_1-x64 via Explorer.
- Open their directory, e.g. by right-click and Open file location in Explorer search context.
- Verify the desired versions of
libssl-1_1-x64.dllas above (2-3).
services.msc, locate and stop Icinga 2.
- Backup the old DLLs from the sbin folder.
- Copy the new ones into the sbin folder, replacing the old ones.
- Verify the changes had the desired effect by running
& "$Env:ProgramFiles\ICINGA2\sbin\icinga2.exe" --versionvia PowerShell. Check the OpenSSL version there.
- Start Icinga 2 again.
At your option:
- re-use the DLLs installed once to patch all systems
- uninstall OpenSSL