diff --git a/ext/openssl/config.w32 b/ext/openssl/config.w32
index e71b86056bc95..e9c567dfa6510 100644
--- a/ext/openssl/config.w32
+++ b/ext/openssl/config.w32
@@ -2,11 +2,16 @@
 
 ARG_WITH("openssl", "OpenSSL support", "no,shared");
 
+ARG_WITH("openssl-legacy-provider", "OPENSSL: Load legacy algorithm provider in addition to default provider", "no");
+
 if (PHP_OPENSSL != "no") {
 	var ret = SETUP_OPENSSL("openssl", PHP_OPENSSL);
 
 	if (ret >= 2) {
 		EXTENSION("openssl", "openssl.c xp_ssl.c");
 		AC_DEFINE("HAVE_OPENSSL_EXT", 1, "Define to 1 if the PHP extension 'openssl' is available.");
+		if (PHP_OPENSSL_LEGACY_PROVIDER != "no") {
+			AC_DEFINE("LOAD_OPENSSL_LEGACY_PROVIDER", 1, "Define to 1 to load the OpenSSL legacy algorithm provider in addition to the default provider.");
+		}
 	}
 }
diff --git a/win32/build/confutils.js b/win32/build/confutils.js
index 6d9c935deab4f..2f333668d4552 100644
--- a/win32/build/confutils.js
+++ b/win32/build/confutils.js
@@ -456,7 +456,7 @@ can be built that way. \
 	var snapshot_build_exclusions = new Array(
 		'debug', 'lzf-better-compression', 'php-build', 'snapshot-template', 'zts',
 		'ipv6', 'fd-setsize', 'pgi', 'pgo', 'all-shared', 'config-profile', 'sanitizer',
-		'phpdbg-debug'
+		'phpdbg-debug', 'openssl-legacy-provider'
 	);
 	var force;