As the bug report mentions, the sleep(1) call appears to be wrapped in a #define that (I assume) won't be active in normal OpenSSL builds. At least in v0.9.8o (

As the bug report mentions, the sleep(1) call appears to be wrapped in a #define that (I assume) won't be active in normal OpenSSL builds. At least in v0.9.8o (the only one I checked) the only references I see are: ssl/s2_pkt.c: #ifdef PKT_DEBUG if (s->debug & 0x01) sleep(1); #endif There are two references like that to PKT_DEBUG (read and write); the only other is: ssl/ssl_locl.h: /*#define PKT_DEBUG 1 */ I suspect this is a non-issue. Interesting though.