Oh, boy, was this stupid. Thank you very much, I've actually though about this, but said "naah, probably won't help". I will report it to the OpenSSL guys. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,223843,223873#msg-223873