It's a new feature, not a bug-fix, so it would not appear in 1.0.2 It is already implemented in master, which will become version 1.1 -- Rich Salz, OpenSSL dev team; rsalz at openssl.org