diff -Nru freeradius-3.2.7+dfsg/debian/changelog freeradius-3.2.7+dfsg/debian/changelog
--- freeradius-3.2.7+dfsg/debian/changelog	2025-02-10 22:50:22.000000000 +0100
+++ freeradius-3.2.7+dfsg/debian/changelog	2025-10-01 19:36:38.000000000 +0200
@@ -1,3 +1,10 @@
+freeradius (3.2.7+dfsg-1+deb13u1) trixie; urgency=medium
+
+  * Non-maintainer upload.
+  * Backport patch to fix compatibility with OpenSSL 3.5.2 (Closes: #1111328)
+
+ -- Sebastian Andrzej Siewior <sebastian@breakpoint.cc>  Wed, 01 Oct 2025 19:36:38 +0200
+
 freeradius (3.2.7+dfsg-1) unstable; urgency=medium
 
   * New upstream version 3.2.7+dfsg
diff -Nru freeradius-3.2.7+dfsg/debian/patches/fips.patch freeradius-3.2.7+dfsg/debian/patches/fips.patch
--- freeradius-3.2.7+dfsg/debian/patches/fips.patch	1970-01-01 01:00:00.000000000 +0100
+++ freeradius-3.2.7+dfsg/debian/patches/fips.patch	2025-08-21 14:05:00.000000000 +0200
@@ -0,0 +1,16 @@
+Author: Alan T. DeKok <aland@freeradius.org>
+Description: change "fips=no" to "-fips"
+Origin: upstream, https://github.com/FreeRADIUS/freeradius-server/commit/59e262f1134fef8d53d15ae963885a08c9ea8315
+Forwarded: https://github.com/FreeRADIUS/freeradius-server/issues/5631
+Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1111328
+--- a/src/main/tls.c
++++ b/src/main/tls.c
+@@ -3644,7 +3644,7 @@
+ 	CONF_modules_load_file(NULL, NULL, 0);
+ 
+ #if OPENSSL_VERSION_NUMBER >= 0x30000000L
+-	EVP_set_default_properties(NULL, "fips=no");
++	EVP_set_default_properties(NULL, "-fips");
+ #endif
+ 
+ 	/*
diff -Nru freeradius-3.2.7+dfsg/debian/patches/series freeradius-3.2.7+dfsg/debian/patches/series
--- freeradius-3.2.7+dfsg/debian/patches/series	2025-02-10 22:50:22.000000000 +0100
+++ freeradius-3.2.7+dfsg/debian/patches/series	2025-10-01 19:31:39.000000000 +0200
@@ -5,3 +5,4 @@
 debian-local/0010-version.c-disable-openssl-version-check.patch
 dont-install-tests.diff
 snakeoil-certs.diff
+fips.patch