base-system Disable EC/RC5 algorithms (as they seem to be patented) Enable support for RFC 3779 (X.509 Extensions for IP Addresses and AS Identifiers) Enable the Heartbeat Extension in TLS and DTLS cpe:/a:openssl:openssl