SSL Error preventing upgrade to Splunk 8

[csyvenky]

Context:
Windows 10 Pro
Splunk 7.3.4

What? Trying to upgrade to Splunk 8.0.1. Half way during the upgrade the installer would error and rollback.

Errors:
1. The code execution cannot proceed because SSLEAY32.DLL was not found.
2. The code execution cannot proceed because LIBEAY32.DLL was not found.

[helge]

I tried - unsuccessfully - upgrading Splunk 8.1.5 to 8.2.1 and, when that consistently failed with the errors the OP mentioned, also the upgrade to 8.2.0. Same result.

I then proceeded by uninstalling the existing version, followed by a clean install of 8.2.1, which succeeded.

Afterwards, I compared the versions of libeay32.dll and ssleay32.dll that were present in 8.1.5 prior to the upgrade with the versions that came with 8.2.1. Interestingly, the newer Splunk version has an older version of the OpenSSL libraries:

• Splunk 8.1.5: 1.0.2.25
• Splunk 8.2.1: 1.0.2.24

I suspect this to be the problem.

Machine this happened on:

• OS: Windows Server 2016
• Splunk web SSL access : enabled

[csyvenky]

My resolution (prior to running Splunk setup .MSI):
- Downloaded the latest compiled OpenSSL 64-bit package from https://indy.fulgan.com/SSL/.
- Extracted the libeay32.dll and ssleay32.dll files to the C:\Windows\System32 directory.