TLS renegociation bug: time for OpenSSL upgrade?

[Emmanuel Dreyfus <manu%netbsd.org@localhost>]

Hi

NetBSD's base system OpenSSL seems to get a bit old: there is the famous 
TLS renegociation problem, and I just discovered that Firefox 3.6's TLSv1
implementation breaks with our OpenSSL
http://mail-index.netbsd.org/netbsd-users/2009/11/21/msg004905.html

No base system OpenSSL seems to be planned (correct me if I'm wrong), 
pkgsrc's OpenSSL will fix Firefox's TLSv1 problem, but does it fix the
TLS renegociation problem?

Anyone knows?

-- 
Emmanuel Dreyfus
manu%netbsd.org@localhost