freesbd openssl ports patch that disables use of RC4 in TLS v1.1+. Without this patch, effective cipher list for TLS v1.1+ will be different than the one we use in production

patch-ssl__s3_lib.c

--- ./ssl/s3_lib.c.orig	2014-05-18 17:03:24.000000000 +0200
+++ ./ssl/s3_lib.c	2014-05-18 17:01:47.000000000 +0200
@@ -3816,7 +3816,12 @@
 			(TLS1_get_version(s) < TLS1_2_VERSION))
 			continue;

-		ssl_set_cert_masks(cert,c);
+        /* Disable RC4 for TLS v1.1+ */
+         if ((c->algorithm_enc == SSL_RC4) &&
+             (TLS1_get_version(s) >= TLS1_1_VERSION))
+             continue;
+
+        ssl_set_cert_masks(cert,c);
 		mask_k = cert->mask_k;
 		mask_a = cert->mask_a;
 		emask_k = cert->export_mask_k;