How to uninstall Openssl on Windows Server 2019 and 2016

Question

I recently installed Windows Server 2019 and ran a Nessus scan on it shortly after install. Nessus reports a CVE for Openssl on the server. I did not install openssl, cannot find it installed, and don't want it installed. openssl version -a from command prompt errors which typically means it is not installed, however Nessus is reporting Openssl v3.0.7.0 is installed . Does Microsoft bundle openssl with Windows 2019 installer? If so where is it located and how can it be uninstalled?

Answer 1

Hello Cmdr_Shears,

Thank you for posting in our Q&A forum.

The system may have OpenSSL installed, you can try to check by running the command: ‘openssl’(without quotes)

You can try to check the version run the command: ‘openssl version’ (without quotes)

Most software will ship with OpenSSL code contained within a library (a DLL file on Windows).

How To check the version OpenSSL library are typically named libcrypto.dll or libssl.dll on Windows.

We can try to check or find whether there is such DLL file related to openssl and delete or remove it.

Reference.
https://www.malwaretech.com/2022/11/everything-you-need-to-know-about-the-openssl-3-0-7-patch.html#:~:text=The%20system%20may%20have%20OpenSSL%20installed%2C%20which%20can,file%20on%20Windows%2C%20or%20SO%20file%20on%20Linux%29.

Hope the information above is helpful. If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

==========================================

If the Answer is helpful, please click "Accept Answer" and upvote it.