Hello, Is Debian OpenSSL build with FIPS mode? There is vulnerability related to that feature, which has TODO-note in security tracker: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-5095 I can create bug-report out of this if we do use FIPS. I am sorry, but I do not know how to check that by myself. - Henri Salo