I need to compile apache2.2.14 for windows because of cve-2009-3555. It is my understanding for that problem I need to compile apache with openssl-0.9.8l instead of the previous which was used in the 2.2.14 binary, which was I believe, 0.9.8k. but I ran into a couple questions/issues. so if anyone has already figured this out I'd really appreciate the advice. These are the instructions I am following: http://httpd.apache.org/docs/2.2/platform/win_compiling.html That instructs us to apply 3 patches. http://www.apache.org/dist/httpd/binaries/win32/patches_applied/ 2 of those patches appear to be for previous versions of openssl? I am no patch expert. Does there need to be another patch for this version of openssl? Anyone have any idea? In any case try to do this step; "perl Configure no-rc5 no-idea enable-mdc2 enable-zlib VC-WIN32 -Ipath/to/srclib/zlib -Lpath/to/srclib/zlib ms\do_masm.bat nmake -f ms\ntdll.mak" I get an error from the last command: E:\apache\httpd-2.2.14\srclib\openssl\openssl-0.9.8l>nmake -f ms\ntdll.mak "Microsoft (R) Program Maintenance Utility Version 9.00.30729.01 Copyright (C) Microsoft Corporation. All rights reserved. ' in macroak(610) : fatal error U1001: syntax error : illegal character ' Stop. " Unfortunately that is way over my head. Anyone see what should be changed here? it has a control-m between SSL and OBJ on line 612. I suspect that is not correct but what should be there? On the other hand it is complaining about a quote mark. 610 $(OBJ_D)\e_ubsec.obj $(OBJ_D)\engines.obj $(OBJ_D)\e_capi.obj 611 612 SSL OBJ=$(OBJ_D)\ssl.obj \ --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx