How to install OpenSSL from source on Windows 10/11?

Question

I am currently using Windows 11 but I assume it's the same steps for Windows 10.

I've searched everywhere, and there is not a single tutorial that shows how to succesfully install OpenSSL on Windows.

All answers on this website are just workarounds, for example using the Git version. I specifically use OpenSSL from XAMPP, but that's not what I want.

I want to be able to install OpenSSL from source. Also, currently Git and XAMPP install OpenSSL version 1.1.1, and I want OpenSSL 3.

I've tried all methods, and the OpenSSL instructions lack information. They just say some hints and then three dots (...), like (./Configure...).

This is where I'm trying to follow:

https://github.com/openssl/openssl/blob/master/NOTES-WINDOWS.md#native-builds-using-mingw

For this example, I went for the MinGW method (But, if you can help installing it via one of the other methods successfully then it's alright as well and I will also do it):

I installed MSYS32 and Perl on Windows, but then I got stuck at the MinGW part, I already installed MinGW on MSYS32 - I just installed ALL of the packages in the toolchain:

$ pacman -S mingw-w64-ucrt-x86_64-toolchain
:: There are 19 members in group mingw-w64-ucrt-x86_64-toolchain:
:: Repository ucrt64
   1) mingw-w64-ucrt-x86_64-binutils  2) mingw-w64-ucrt-x86_64-crt-git
   3) mingw-w64-ucrt-x86_64-gcc  4) mingw-w64-ucrt-x86_64-gcc-ada
   5) mingw-w64-ucrt-x86_64-gcc-fortran  6) mingw-w64-ucrt-x86_64-gcc-libgfortran
   7) mingw-w64-ucrt-x86_64-gcc-libs  8) mingw-w64-ucrt-x86_64-gcc-objc
   9) mingw-w64-ucrt-x86_64-gdb  10) mingw-w64-ucrt-x86_64-gdb-multiarch
   11) mingw-w64-ucrt-x86_64-headers-git  12) mingw-w64-ucrt-x86_64-libgccjit
   13) mingw-w64-ucrt-x86_64-libmangle-git  14) mingw-w64-ucrt-x86_64-libwinpthread-git
   15) mingw-w64-ucrt-x86_64-make  16) mingw-w64-ucrt-x86_64-pkgconf
   17) mingw-w64-ucrt-x86_64-tools-git  18) mingw-w64-ucrt-x86_64-winpthreads-git
   19) mingw-w64-ucrt-x86_64-winstorecompat-git

But then, gcc command still doesn't work. I believe it has something to do with me not adding it to the PATH of MSYS32, but there is no instructions as to how to do that (also, even after installing the entire toolchain, C:\msys64\mingw64\bin is empty!)

Also, they later say:

Apart from that, follow the Unix / Linux instructions in INSTALL.md.

Awesome, so I go to the INSTALL.md, and all that's there, is just another hint:

$ ./Configure
$ make
$ make test

Why is it so complex to just build and install OpenSSL on Windows? And I want the official from source, and not workarounds like via Git or XAMPP, or unknown 3rd party. (Why don't they provide a .exe anyway?)

Hopefully this post will be able to be used as future reference for anyone that wants to install OpenSSL on Windows with full instructions

Thanks

Tobias

Answer 1

I finally made it, I installed OpenSSL 3.2.0-dev on Windows 11.

These are the detailed steps so that anyone in the future can do it:

I ended up using the first method, with C++, as seen here: https://github.com/openssl/openssl/blob/master/NOTES-WINDOWS.md#quick-start

Here are the instructions, I tried to make them as detailed as possible, let me know if it needs changes or fixes:

First steps: Installing the necessary software:

Step 1: Install Perl - Install the Strawberry version, much easier to install and it installs everything and also adds them automatically to the Windows PATH variables

Step 2: Install NASM, and add it to the Windows system (or your user's) PATH variables. I ended up adding it only to my user's variables PATH: C:\Users\<username>\AppData\Local\bin\NASM

Step 3: Install Visual Studio (I have Visual Studio Community 2022), and install the Desktop development with c++. I ended up choosing the following packages(I'm sure not all are necessary, but if you know, please let me know which ones are the ones I need so that I'll update the photo to avoid installing too many packages):

Step 4: Download and install the Build Tools for Visual Studio (I assume in the future this link will change so look for the Build Tools installation link for your Visual Studio version): https://visualstudio.microsoft.com/downloads/#build-tools-for-visual-studio-2022

Step 5: After installing the build tools, launch the Visual Studio installer. In the installer, you will now see the Build Tools. Click on "Modify" under the Visual Studio Build Tools:

And then install the needed packages for the OpenSSL installation, it's what's going to install nmake:

Then, the build and installation steps:

Step 6: Clone the openssl repository to some folder on your PC (I cloned it in C:/ so I ended up having C:/openssl/), and fix the line endings by running the following commands:

> git clone git://git.openssl.org/openssl.git

> cd openssl
> git config core.autocrlf false
> git config core.eol lf
> git checkout .

Update: If you want another version, clone the repository without checking out, fix the line-endings and then checkout to the version you want. For example if you want 3.1.0 stable (Note the -n flag for no-checkout):

> git clone -n git://git.openssl.org/openssl.git

> cd openssl
> git config core.autocrlf false
> git config core.eol lf
> git checkout openssl-3.1.0

Step 7: In Windows Search, search for "Developer Command Prompt for VS 2022" (Or any of your versions), and run it as administrator:

Which will open this command window:

Step 8: You need to set the right environment for the version of OpenSSL you want to install, otherwise build will fail. In my case, I wanted to install OpenSSL for 64-bit systems, copy-paste the following (including the quotes, and change the path according to your Visual Studio installation path):

"C:\Program Files\Microsoft Visual Studio\2022\Community\VC\Auxiliary\Build\vcvars64.bat"

which will then set the environment, as seen here:

Step 9: From the same Developer Command Prompt, cd into the folder you cloned the openssl source code, in my case it was C:/openssl, and then follow the steps from the OpenSSL guide:

> perl Configure VC-WIN64A
> nmake
> nmake test
> nmake install

Note that these steps take time, it took me around 20-30 minutes to finish all these 4 commands

Step 10: That's it! It's installed! You can find the OpenSSL executable (openssl.exe) at C:\openssl\apps. (And add it to Windows system or user's PATH variables if you want)

In my case when I run openssl version I see OpenSSL 3.2.0-dev (Library: OpenSSL 3.2.0-dev )

Tobias

Well this is awfully complicated. – Lax

BLOODY HELL! I mean, you get an upvote for the solution, but good grief! – Marathi

god help us all – Ptyalin

Answer 2

Other alternatif install OpenSSL not from source

Open Command Prompt as Administrator then typo winget install openssl then enter.

Turret

This does not install from source, it download the binary that you can already find on their website : Microsoft is not responsible for, nor does it grant any licenses to, third-party packages. and Downloading https://slproweb.com/download/Win64OpenSSL-3_1_2.msi – Rosalvarosalyn

Answer 3

If you have Git installed in your local, open git bash, and use the command openssl. It should work

Settlings

Answer 4

If you have Chocolatey installed: choco install openssl

if not you really should...

To install chocolatey: in Powershell:

Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))

Phenice

I guess this should be run as admin? – Orthodoxy

The question asks specifically how to build fro source, not download an unknown binary. – Hobnail

Answer 5

Installing OpenSSL on Windows involves downloading the precompiled binaries and setting them up on your system. Here's a step-by-step guide:

Step 1: Download OpenSSL for Windows

Visit the OpenSSL for Windows Download Page:

Go to Shining Light Productions' OpenSSL download page, which provides precompiled binaries for OpenSSL on Windows. Choose the Correct Version:

Select the version that matches your system architecture:

Win64 OpenSSL v1.1.x for 64-bit systems.

Win32 OpenSSL v1.1.x for 32-bit systems.

For most modern systems, you'll want the 64-bit version (Win64).

Download the Installer:

Download the executable installer (e.g., Win64OpenSSL-1_1_1u.exe).

Step 2: Install OpenSSL

Run the Installer:

Locate the downloaded installer in your Downloads folder and double-click it to start the installation process. Installation Options:

Select Installation Directory: You can accept the default installation directory or choose a custom location. The default is usually C:\Program Files\OpenSSL-Win64 for 64-bit systems.

Select Components:

You can leave the default options selected, which include installing the OpenSSL binaries, libraries, and documentation.

Copy OpenSSL DLLs to the Windows System Directory:

You'll be prompted to choose whether to copy OpenSSL DLLs to the Windows system directory. It's recommended to choose Yes unless you want to manage DLLs manually.

Finish the Installation:

Continue following the prompts until the installation completes. Click Finish to exit the installer.

Step 3: Add OpenSSL to the System PATH

To use OpenSSL from the Command Prompt, you need to add its binary directory to the Windows PATH environment variable.

Open Environment Variables:

Right-click on This PC or Computer on your desktop or in File Explorer.

Click Properties.

Click Advanced system settings.

Click the Environment Variables button.

Edit the PATH Variable:

Under System variables, scroll down and select the Path variable, then click Edit.

Click New and add the path to the OpenSSL bin directory. This is typically:

C:\Program Files\OpenSSL-Win64\bin for 64-bit installations.

C:\Program Files (x86)\OpenSSL-Win32\bin for 32-bit installations.

Click OK to save the changes.

Verify the Installation:

Open a new Command Prompt window (to ensure it picks up the updated PATH). Type openssl version and press Enter.

You should see the installed version of OpenSSL displayed.

Step 4: Using OpenSSL

Now that OpenSSL is installed, you can use it directly from the Command Prompt for generating certificates, creating keys, and other cryptographic tasks.

Dextrogyrate