Sorry, nobody looked at this in years. It's too late for 1.0.1, it might be fixed in 1.0.2, and it's definiltey fixed in master. Closing ticket. -- Rich Salz, OpenSSL dev team; rsalz at openssl.org