Hi, Erwann! I see the problem you are trying to solve but unfortunately this change would break xmlsec tests and potentially some applications. I wonder if there is a better way of doing this in the recently released OpenSSL 0.9.8. BTW, have you tried to ask this question in openssl mailing list? Aleksey