diff --git a/pegasus-2.9.0-openssl.patch b/pegasus-2.9.0-openssl.patch
new file mode 100644
index 0000000..32b315b
--- /dev/null
+++ b/pegasus-2.9.0-openssl.patch
@@ -0,0 +1,12 @@
+diff -up pegasus/src/Pegasus/Common/SSLContext.cpp.openssl pegasus/src/Pegasus/Common/SSLContext.cpp
+--- pegasus/src/Pegasus/Common/SSLContext.cpp.openssl	2008-12-16 19:56:00.000000000 +0100
++++ pegasus/src/Pegasus/Common/SSLContext.cpp	2009-08-26 14:22:18.000000000 +0200
+@@ -272,7 +272,7 @@ int SSLCallback::verificationCRLCallback
+     X509_REVOKED* revokedCert = NULL;
+     for (int i = 0; i < sk_X509_REVOKED_num(revokedCerts); i++)
+     {
+-        revokedCert = (X509_REVOKED *)sk_value(X509_CRL_get_REVOKED(crl), i);
++        revokedCert = sk_X509_REVOKED_value(X509_CRL_get_REVOKED(crl), i);
+ 
+         //a matching serial number indicates revocation
+         if (ASN1_INTEGER_cmp(revokedCert->serialNumber, serialNumber) == 0)
diff --git a/tog-pegasus.spec b/tog-pegasus.spec
index 6b58343..81eae43 100644
--- a/tog-pegasus.spec
+++ b/tog-pegasus.spec
@@ -80,6 +80,7 @@ Patch11:		pegasus-2.9.0-no_privilege_separation.patch
 Patch12:		pegasus-2.7.0-no_snmp_tests.patch
 Patch13:                pegasus-2.9.0-sparc.patch
 Patch14:                pegasus-2.7.2-baseelif.patch
+Patch15:		pegasus-2.9.0-openssl.patch
 #
 Conflicts: 		openwbem
 Provides: 		tog-pegasus-cimserver
@@ -148,6 +149,7 @@ The OpenPegasus WBEM tests for the OpenPegasus %{version} Linux rpm.
 %patch5 -p1 -b .local-or-remote-auth
 %patch13 -p1 -b .sparc
 %patch14 -p1 -b .bareelif
+%patch15 -p1 -b .openssl
 %patch0 -p1 -b .initscript
 find . -name 'CVS' -exec /bin/rm -rf '{}' ';' >/dev/null 2>&1 ||:;
 
@@ -461,7 +463,7 @@ fi
 
 
 %changelog
-* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 2:2.9.0-5
+* Wed Aug 25 2009 Tomas Mraz <tmraz@redhat.com> - 2:2.9.0-5
 - rebuilt with new openssl
 
 * Wed Aug 19 2009 Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.9.0-4