On some old systems like centos 4.5, 4.7 openssl will need to be upgraded to newest version
Here are the steps to upgrade :
tar -xvzf openssl-0.9.8k.tar.gz
./config –prefix=/opt/openssl shared
make;make test;make install
Running upcp after building fixes the openssl-devel files.
However, even though “openssl version” returns 0.9.8.k, apache still uses 0.9.7.a. I realize this has redhat security backports.