$ winget install --id FireDaemon.OpenSSL --exact --version 4.0.0.3Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
FireDaemon OpenSSL uses EXE. The silent install switches are /exenoui /qn /norestart REBOOT=ReallySuppress ADJUSTSYSTEMPATHENV=yes.
FireDaemon-OpenSSL-x64-4.0.0.3.exe /exenoui /qn /norestart REBOOT=ReallySuppress ADJUSTSYSTEMPATHENV=yes
See the full silent install reference for FireDaemon OpenSSL →
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
OpenSSL is a popular open-source software library and command-line tool that provides a robust, full-featured set of cryptographic functions to secure communications over computer networks. It implements the Transport Layer Security (TLS) protocol, which is used to encrypt data transmissions across a wide range of applications including web servers, email, VPNs, databases, and IoT devices. OpenSSL provides a wide range of cryptographic functions, including symmetric encryption, public-key encryption, message digest and hash functions, digital signatures, and random number generation. It supports a large number of cryptographic algorithms, including AES, RSA, ECDSA, and Diffie-Hellman, as well as post-quantum algorithms such as ML-KEM, ML-DSA, and SLH-DSA. In addition to cryptographic functions, OpenSSL provides utilities for generating and managing digital certificates and keys, creating and verifying digital signatures, and performing TLS handshakes and negotiations. It also includes a comprehensive command-line tool for certificate management, key generation, TLS diagnostics, and general cryptographic operations.
The key advantages of using the FireDaemon OpenSSL over others that are available are:
- Recognised Source: Listed by the OpenSSL Project as a trusted third-party binary distribution for Windows
- Zero Dependencies: No Microsoft Visual C++ Redistributables required. We leverage the native Windows Universal C Runtime (UCRT) for "clean system" stability
- EV-Signed Integrity: All installers and binaries are digitally signed with a Sectigo Extended Validation (EV) certificate to ensure authenticity and bypass Windows SmartScreen warnings
- Flexible Deployment: Packaged for standalone, portable, or embedded use cases
- Verifiable Security: Every build is pre-scanned via VirusTotal and backed by our publicly available build scripts for total transparency
- Compliance Ready: Designed for developers and sysadmins who require a verifiable, audit-ready OpenSSL environment
| Architecture | Type | Scope | Install | Download |
|---|---|---|---|---|
| x64 | EXE | machine | Direct |
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
25 known CVEs via NVD
Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the appl...
Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavio...
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur...
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur res...
Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service...
Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of p...
Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks. Impact summary: This out-of-bounds read may trigger a crash which leads to D...
Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact s...
See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.
More from FireDaemon or browse cryptography, cybersecurity, openssl.