Document -debug_decrypt option.

[openssl.git] / FAQ

diff --git a/FAQ b/FAQ
index 550a998e6fba9e4c66cc3471aed727b695a0e1fb..c4c2848040e524cca70e7cccee3097549a0b7f2f 100644 (file)
--- a/FAQ
+++ b/FAQ
@@ -755,6 +755,9 @@ LOT of false positives.
 
 * I'm SURE I've found a bug, how do I report it?
 
+To avoid duplicated reports check the mailing lists and release notes for the
+relevant version of OpenSSL to see if the problem has been reported already.
+
 Bug reports with no security implications should be sent to the request
 tracker. This can be done by mailing the report to <rt@openssl.org> (or its
 alias <openssl-bugs@openssl.org>), please note that messages sent to the
@@ -786,6 +789,9 @@ more active team members (e.g. Steve). If you wish to use PGP to send
 in a report please use one or more of the keys of the team members listed
 at <URL: http://www.openssl.org/about/>
 
+Note that bugs only present in the openssl utility are not in general
+considered to be security issues. 
+
 [PROG] ========================================================================
 
 * Is OpenSSL thread-safe?