Surely you'll now have to do this for all the past issues like the recent session renegotiation openssl issue too? alan