The OpenSSL bug tracking RT Has been and continues to be a valuable resource. End users do report bugs there. They often seem to go there to die. We've fixed many bugs straight out of the OpenSSL RT. OpenSSL still hasn't fixed lots of them. Users are starting to ask us to fix first.