diff --git a/security/sslsplit/Makefile b/security/sslsplit/Makefile
index 442d74991d3..46541def974 100644
--- a/security/sslsplit/Makefile
+++ b/security/sslsplit/Makefile
@@ -1,8 +1,8 @@
-# $OpenBSD: Makefile,v 1.7 2014/12/12 21:51:59 sthen Exp $
+# $OpenBSD: Makefile,v 1.8 2015/03/16 08:50:08 sthen Exp $
 
 COMMENT=	transparent and scalable SSL/TLS interception
 
-DISTNAME=	sslsplit-0.4.10
+DISTNAME=	sslsplit-0.4.11
 EXTRACT_SUFX=	.tar.bz2
 
 CATEGORIES=	security
diff --git a/security/sslsplit/distinfo b/security/sslsplit/distinfo
index ffd5396206c..3bb3d69d485 100644
--- a/security/sslsplit/distinfo
+++ b/security/sslsplit/distinfo
@@ -1,2 +1,2 @@
-SHA256 (sslsplit-0.4.10.tar.bz2) = 8jB3Lv4lVXrGKYeoZbiJvZJTNFrLTwrShBx4SOeZPOA=
-SIZE (sslsplit-0.4.10.tar.bz2) = 266830
+SHA256 (sslsplit-0.4.11.tar.bz2) = dVVMoR7jjXJ0VrF7av1TeeXBTAUWDKZnVaJfJItLFzA=
+SIZE (sslsplit-0.4.11.tar.bz2) = 267290
diff --git a/security/sslsplit/patches/patch-ssl_c b/security/sslsplit/patches/patch-ssl_c
new file mode 100644
index 00000000000..e7f11397be6
--- /dev/null
+++ b/security/sslsplit/patches/patch-ssl_c
@@ -0,0 +1,12 @@
+$OpenBSD: patch-ssl_c,v 1.3 2015/03/16 08:50:08 sthen Exp $
+--- ssl.c.orig	Mon Mar 16 08:46:32 2015
++++ ssl.c	Mon Mar 16 08:47:53 2015
+@@ -898,7 +898,7 @@ ssl_x509chain_load(X509 **crt, STACK_OF(X509) **chain,
+ 			goto leave3;
+ 	}
+ 
+-#if (OPENSSL_VERSION_NUMBER < 0x1000200fL)
++#if defined(LIBRESSL_VERSION_NUMBER) || (OPENSSL_VERSION_NUMBER < 0x1000200fL)
+ 	tmpchain = tmpctx->extra_certs;
+ #else /* OpenSSL >= 1.0.2 */
+ 	rv = SSL_CTX_get0_chain_certs(tmpctx, &tmpchain);