http://u.qdnx.org/file/theru-20140408T195341-wxywrhm.html
@nybill :) always someone to ask. If I understand the openssl thing right you're not affected unless you run a https:// site. Only thing I run https is the login for my status.net and gnu social site. I probably should regenerate the ssl certs for both - but one is about to expire and the other one doesn't really matter :)