From: Alexandr Nedvedicky <sashan@openssl.org>
Date: Tue, 13 Jan 2026 08:58:56 +0000 (+0100)
Subject: Explain the purpose of _WIN32_WINNT macro and how it is supposed to be used
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d15e7177225ec26552b7a6fce61bb821bf797ae4;p=thirdparty%2Fopenssl.git

Explain the purpose of _WIN32_WINNT macro and how it is supposed to be used

Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
MergeDate: Thu Jan 22 10:04:08 2026
(Merged from https://github.com/openssl/openssl/pull/29614)
---

diff --git a/include/internal/e_os.h b/include/internal/e_os.h
index 9e4e0afaa0d..a237005e7e8 100644
--- a/include/internal/e_os.h
+++ b/include/internal/e_os.h
@@ -85,16 +85,29 @@
 #ifdef WINDOWS
 #if !defined(_WIN32_WCE) && !defined(_WIN32_WINNT)
 /*
- * Defining _WIN32_WINNT here in e_os.h implies certain "discipline."
- * Most notably we ought to check for availability of each specific
- * routine that was introduced after denoted _WIN32_WINNT with
- * GetProcAddress(). Normally newer functions are masked with higher
- * _WIN32_WINNT in SDK headers. So that if you wish to use them in
- * some module, you'd need to override _WIN32_WINNT definition in
- * the target module in order to "reach for" prototypes, but replace
- * calls to new functions with indirect calls. Alternatively it
- * might be possible to achieve the goal by /DELAYLOAD-ing .DLLs
- * and check for current OS version instead.
+ * The _WIN32_WINNT is described here:
+ * https://learn.microsoft.com/en-us/cpp/porting/modifying-winver-and-win32-winnt?view=msvc-170
+ * In a nutshell the macro defines minimal required Windows version where
+ * the resulting application is guaranteed to run on. If left undefined here,
+ * then the definition is provided by the Windows SDK found on host where
+ * application is being built.
+ *
+ * OpenSSL defaults to version 0x501, which matches Windows XP, meaning the
+ * compiled library will use APIs available on Windows XP and later.  User may
+ * override the version specified here at build time using command as
+ * follows:
+ *     perl ./Configure "-D_WIN32_WINNT=0x...." ...
+ *
+ * The list of recognized constants (as found in the link above) is as follows:
+ * 	0x0400 // Windows NT 4.0
+ *	0x0500 // Windows 2000
+ *	0x0501 // Windows XP
+ *	0x0502 // Windows Server 2003
+ *	0x0600 // Windows Vista, Windows Server 2008, Windows Vista
+ *	0x0601 // Windows 7
+ *	0x0602 // Windows 8
+ *	0x0603 // Windows 8.1
+ *	0x0A00 // Windows 10
  */
 #define _WIN32_WINNT 0x0501
 #endif
diff --git a/include/internal/e_winsock.h b/include/internal/e_winsock.h
index c2a08ebed1a..c5af03639d1 100644
--- a/include/internal/e_winsock.h
+++ b/include/internal/e_winsock.h
@@ -14,16 +14,29 @@
 #ifdef WINDOWS
 #if !defined(_WIN32_WCE) && !defined(_WIN32_WINNT)
 /*
- * Defining _WIN32_WINNT here in e_winsock.h implies certain "discipline."
- * Most notably we ought to check for availability of each specific
- * routine that was introduced after denoted _WIN32_WINNT with
- * GetProcAddress(). Normally newer functions are masked with higher
- * _WIN32_WINNT in SDK headers. So that if you wish to use them in
- * some module, you'd need to override _WIN32_WINNT definition in
- * the target module in order to "reach for" prototypes, but replace
- * calls to new functions with indirect calls. Alternatively it
- * might be possible to achieve the goal by /DELAYLOAD-ing .DLLs
- * and check for current OS version instead.
+ * The _WIN32_WINNT is described here:
+ * https://learn.microsoft.com/en-us/cpp/porting/modifying-winver-and-win32-winnt?view=msvc-170
+ * In a nutshell the macro defines minimal required Windows version where
+ * the resulting application is guaranteed to run on. If left undefined here,
+ * then the definition is provided by the Windows SDK found on host where
+ * application is being built.
+ *
+ * OpenSSL defaults to version 0x501, which matches Windows XP, meaning the
+ * compiled library will use APIs available on Windows XP and later.  User may
+ * override the version specified here at build time using command as
+ * follows:
+ *     perl ./Configure "-D_WIN32_WINNT=0x...." ...
+ *
+ * The list of recognized constants (as found in the link above) is as follows:
+ * 	0x0400 // Windows NT 4.0
+ *	0x0500 // Windows 2000
+ *	0x0501 // Windows XP
+ *	0x0502 // Windows Server 2003
+ *	0x0600 // Windows Vista, Windows Server 2008, Windows Vista
+ *	0x0601 // Windows 7
+ *	0x0602 // Windows 8
+ *	0x0603 // Windows 8.1
+ *	0x0A00 // Windows 10
  */
 #define _WIN32_WINNT 0x0501
 #endif