--- openssl-0.9.8a/ssl/ssl.h.cipher-change	2005-11-22 16:36:22.000000000 +0100

+++ openssl-0.9.8a/ssl/ssl.h	2005-12-15 11:28:05.000000000 +0100

@@ -477,7 +477,7 @@

 #define SSL_OP_MICROSOFT_SESS_ID_BUG			0x00000001L

 #define SSL_OP_NETSCAPE_CHALLENGE_BUG			0x00000002L

-#define SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG		0x00000008L

+#define SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG		0x00000008L /* can break some security expectations */

 #define SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG		0x00000010L

 #define SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER		0x00000020L

 #define SSL_OP_MSIE_SSLV2_RSA_PADDING			0x00000040L /* no effect since 0.9.7h and 0.9.8b */

@@ -494,7 +494,7 @@

 /* SSL_OP_ALL: various bug workarounds that should be rather harmless.

  *             This used to be 0x000FFFFFL before 0.9.7. */

-#define SSL_OP_ALL					0x00000FFFL

+#define SSL_OP_ALL					0x00000FF7L /* without SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG */

 /* DTLS options */

 #define SSL_OP_NO_QUERY_MTU                 0x00001000L