I know, this isn't really a OpenSSL issue, but we keep getting
questions about it, so we might as well provide the solution...