in the sense that it is utterly wrong, I suppose so...
in reality, openssl appears to be a $1mm+/year for-profit fips consulting business [1] that appears to not care much about security, letting serious security issues sit in their bug tracker for years on end
in reality, openssl appears to be a $1mm+/year for-profit fips consulting business [1] that appears to not care much about security, letting serious security issues sit in their bug tracker for years on end
[1] http://www.youtube.com/watch?v=GnBbhXBDmwU#t=559