mIRC Home    About    Download    Register    News    Help

Print Thread
#268618 26/03/21 04:39 PM
Joined: Jul 2007
Posts: 66
B
beer Offline OP
Babel fish
OP Offline
Babel fish
B
Joined: Jul 2007
Posts: 66
Hi. I just read that it's recommended everyone update SSL to version 1.1.1k to address a couple of new high-severity exploits. I'm using Windows 10 64bit and mirc 7.64. It seems mirc uses 32bit libeay32.dll, libssl32.dll, and ssleay32.dll. The current ssl version of those in my mirc dir is 1.0.1h. I also read that 1.0.x is EOL'ed and everyone should've already moved to the current 1.1.x stable openssl. Although not recommended, the newest 1.0.x I can find is 1.0.1u libeay32.dll and ssleay32.dll. The only 1.1.1k files I can find, 32 or 64bit, are libssl-1_1.dll and libcrypto-1_1.dll. This is a bit confusing..

I prefer mirc use its own ssl libraries kept in the mirc dir. I assume it's a bad idea to mix ssl library versions so:

Does mirc *require* all three dlls? (libeay32.dll, libssl32.dll, and ssleay32.dll)

Can I delete those three ssl 1.0.1h dlls and only copy the two newer ddls I can find? (1.0.1u libeay32.dll and ssleay32.dll)

If I delete the three ssl 1.0.1h dlls and replace them with the actual recommended ssl 1.1.1k libraries, libssl-1_1.dll and libcrypto-1_1.dll, will mirc even recognize those files due to the different filenames?

I appreciate any clarity anyone can offer here!

beer #268620 26/03/21 06:14 PM
Joined: Jan 2004
Posts: 2,127
Hoopy frood
Offline
Hoopy frood
Joined: Jan 2004
Posts: 2,127
//echo -a $sslversion * $ssldll * $ssllibdll

If you have OpenSSL dll's in the mIRC folder, it will use them, and the above points to them. If you quit mirc, move them out of the folder, then restart, you should find both filenames pointing to mirc.exe itself and the $sslversion updated to reflect that. v7.64 uses 1.1.1i, which should show as 1.1.1.9, and the newest beta version should show 1.1.1.10 for 1.1.1j

I haven't tested what happens if I find series 1.0.x dll's and put them in the mirc folder.

Edit: my mirc.ini's [ssl] section has the line load=1 in it, so that causes it to load external 1.1.1-series dll's. If the above command shows pointing at mirc.exe itself already, then you can either run the beta to get a newer DLL version, or copy newer 1.1.1-series DLL's into the mirc folder.

Last edited by maroon; 26/03/21 06:38 PM.
Joined: Jul 2007
Posts: 66
B
beer Offline OP
Babel fish
OP Offline
Babel fish
B
Joined: Jul 2007
Posts: 66
Got it sorted now, thank you maroon!


Link Copied to Clipboard