Openssl version upgrade from Microsoft hosted agents

Question

We are using Microsoft hosted agent to generate self signed certificate from Azure DevOps pipeline using openssl command. Noticed that agents are using openssl version 1.1.1.0

Based on OpenSSL Security Advisory [15 March 2022] recommendation, need to upgrade openssl from 1.1.1 to 1.1.1n.

How can we perform openssl version upgrade?

Answer 1

You're using Microsoft's agent. You've traded flexibility for convenience. You don't control the software on the agent; Microsoft does. Thus, you have two options:

• Wait for Microsoft to update their hosted agents
• Create and maintain your own private agents