I have seen that they have released updates for OpenSSL. I am running a Apache on Windows. If I run "OpenSSL version" it reports "OpenSSL 1.0.1i 6 Aug 2014".
This was a complete solution install, so I'm not clear if OpenSSL is running or not. I cannot find it in processes. I do see httpd.exe running mod_ssl.so. I followed the vendor's howto to create and install a certificate with OpenSSL, so I know OpenSSL exists on the server, I'm just not sure if it is being used. SSL web connections to it are working.
How can I tell if OpenSSL is running, what version is live, and how do I patch a Windows implementation?