--- a/dev-libs/openssl/openssl-1.0.1f.ebuild	2014-01-26 07:01:10.000000000 -0500
+++ b/dev-libs/openssl/openssl-1.0.1f.ebuild	2014-03-28 06:40:31.950641927 -0400
@@ -15,11 +15,15 @@ SRC_URI="mirror://openssl/source/${P}.ta
 LICENSE="openssl"
 SLOT="0"
 KEYWORDS="alpha amd64 arm arm64 hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~arm-linux ~x86-linux"
-IUSE="bindist gmp kerberos rfc3779 sse2 static-libs test +tls-heartbeat vanilla zlib"
+IUSE="bindist gmp kerberos kernel_linux kernel_FreeBSD rfc3779 sctp sse2 static-libs test +tls-heartbeat vanilla zlib"
 
 # Have the sub-libs in RDEPEND with [static-libs] since, logically,
 # our libssl.a depends on libz.a/etc... at runtime.
 LIB_DEPEND="gmp? ( dev-libs/gmp[static-libs(+)] )
+	sctp? (
+		kernel_linux? ( net-misc/lksctp-tools[static-libs(+)] )
+		kernel_FreeBSD? ( sys-freebsd/freebsd-lib )
+	)
 	zlib? ( sys-libs/zlib[static-libs(+)] )
 	kerberos? ( app-crypt/mit-krb5 )"
 # The blocks are temporary just to make sure people upgrade to a
@@ -139,6 +143,7 @@ src_configure() {
 		$(use_ssl gmp gmp -lgmp) \
 		$(use_ssl kerberos krb5 --with-krb5-flavor=${krb5}) \
 		$(use_ssl rfc3779) \
+		$(use_ssl sctp) \
 		$(use_ssl tls-heartbeat heartbeats) \
 		$(use_ssl zlib) \
 		--prefix="${EPREFIX}"/usr \
--- a/dev-libs/openssl/metadata.xml	2014-03-22 15:01:10.000000000 -0400
+++ b/dev-libs/openssl/metadata.xml	2014-03-28 06:39:07.360641606 -0400
@@ -3,6 +3,7 @@
 <pkgmetadata>
 <herd>base-system</herd>
 <use>
+ <flag name="sctp">Support DTLS over the Stream Transmission Control Protocol</flag>
  <flag name='bindist'>Disable EC/RC5 algorithms (as they seem to be patented) -- note: changes the ABI</flag>
  <flag name='rfc3779'>Enable support for RFC 3779 (X.509 Extensions for IP Addresses and AS Identifiers)</flag>
  <flag name='tls-heartbeat'>Enable the Heartbeat Extension in TLS and DTLS</flag>