diff --git a/base/openssl/PKG-INFO b/base/openssl/PKG-INFO
new file mode 100644
index 000000000..a6a8d9bc4
--- /dev/null
+++ b/base/openssl/PKG-INFO
@@ -0,0 +1,17 @@
+Metadata-Version: 1
+Name: openssl
+Version: 1.1.1w
+Summary: Openssl with sctp enabling
+Home-page:
+Author:
+Author-email:
+License: BSD
+
+Description:
+By default, OpenSSL is typically configured and built with support for
+TCP and UDP, but SCTP is not included.
+To support DTLS Protocol, openssl library must be built with
+'enable-sctp' flag.
+
+
+Platform: UNKNOWN
diff --git a/base/openssl/debian/deb_patches/0001-Build-in-support-for-sctp.patch b/base/openssl/debian/deb_patches/0001-Build-in-support-for-sctp.patch
new file mode 100644
index 000000000..c37d259ee
--- /dev/null
+++ b/base/openssl/debian/deb_patches/0001-Build-in-support-for-sctp.patch
@@ -0,0 +1,37 @@
+From 50a3ade26e25df25f9ce800195e232e6e504a79f Mon Sep 17 00:00:00 2001
+From: sabyasachi nayak <sabyasachi.nayak@windriver.com>
+Date: Fri, 10 Nov 2023 11:20:36 +0000
+Subject: [PATCH] Build-in-support-for-sctp
+
+Signed-off-by: sabyasachi nayak <sabyasachi.nayak@windriver.com>
+---
+ debian/control | 2 +-
+ debian/rules   | 2 +-
+ 2 files changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/debian/control b/debian/control
+index 2ad5a22..6dd24bb 100644
+--- a/debian/control
++++ b/debian/control
+@@ -1,5 +1,5 @@
+ Source: openssl
+-Build-Depends: debhelper-compat (= 12), m4, bc, dpkg-dev (>= 1.15.7)
++Build-Depends: debhelper-compat (= 12), m4, bc, dpkg-dev (>= 1.15.7), libsctp-dev
+ Section: utils
+ Priority: optional
+ Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
+diff --git a/debian/rules b/debian/rules
+index 9a46f89..dce8e49 100755
+--- a/debian/rules
++++ b/debian/rules
+@@ -29,7 +29,7 @@ ifneq (,$(filter parallel=%,$(DEB_BUILD_OPTIONS)))
+    MAKEFLAGS += -j$(NUMJOBS)
+ endif
+
+-CONFARGS  = --prefix=/usr --openssldir=/usr/lib/ssl --libdir=lib/$(DEB_HOST_MULTIARCH) no-idea no-mdc2 no-rc5 no-zlib no-ssl3 enable-unit-test no-ssl3-method enable-rfc3779 enable-cms no-capieng
++CONFARGS  = --prefix=/usr --openssldir=/usr/lib/ssl --libdir=lib/$(DEB_HOST_MULTIARCH) no-idea no-mdc2 no-rc5 no-zlib no-ssl3 enable-unit-test no-ssl3-method enable-rfc3779 enable-cms no-capieng enable-sctp
+ OPT_alpha = ev4 ev5
+ ARCHOPTS  = OPT_$(DEB_HOST_ARCH)
+ OPTS      = $($(ARCHOPTS))
+--
+2.30.2
diff --git a/base/openssl/debian/deb_patches/series b/base/openssl/debian/deb_patches/series
new file mode 100644
index 000000000..0904177e0
--- /dev/null
+++ b/base/openssl/debian/deb_patches/series
@@ -0,0 +1 @@
+0001-Build-in-support-for-sctp.patch
diff --git a/base/openssl/debian/meta_data.yaml b/base/openssl/debian/meta_data.yaml
new file mode 100644
index 000000000..f688c81ae
--- /dev/null
+++ b/base/openssl/debian/meta_data.yaml
@@ -0,0 +1,10 @@
+---
+debver: 1.1.1w-0+deb11u1
+debname: openssl
+dl_path:
+  name: openssl-debian-openssl-1.1.1w-0+deb11u1.tar.gz
+  url: https://salsa.debian.org/debian/openssl/-/archive/debian/openssl-1.1.1w-0+deb11u1/openssl-debian-openssl-1.1.1w-0+deb11u1.tar.gz
+  sha256sum: 89d98075fc77871eb619d7c48e3fb1ced0ce431c43b8cd85241a67597d984622
+revision:
+  dist: $STX_DIST
+  PKG_GITREVCOUNT: true
diff --git a/debian_iso_image.inc b/debian_iso_image.inc
index 7a009747b..18ba38515 100644
--- a/debian_iso_image.inc
+++ b/debian_iso_image.inc
@@ -382,6 +382,10 @@ openscap-scanner
 openscap-utils
 python3-openscap
 
+#openssl
+openssl
+libssl1.1
+
 #openvswitch
 openvswitch-common
 openvswitch-switch-dpdk
diff --git a/debian_pkg_dirs b/debian_pkg_dirs
index 4c9f28df9..74bc460ac 100644
--- a/debian_pkg_dirs
+++ b/debian_pkg_dirs
@@ -8,6 +8,7 @@ base/lighttpd
 base/linuxptp
 base/lvm2
 base/lsb
+base/openssl
 base/pf-bb-config
 base/synce4l
 base/systemd