I've also submitted patches to OpenSSL and been entirely ignored[1]. The latest of which strictly improved testing, documentation and included a detailed study

I've also submitted patches to OpenSSL and been entirely ignored[1]. The latest of which strictly improved testing, documentation and included a detailed study and write-up of actual bugs in OpenSSL and downstream code[2]. My conclusion was that the OpenSSL project is not interested in external contributions. [1]: https://www.mail-archive.com/openssl-dev@openssl.org/msg33620.html https://www.mail-archive.com/openssl-dev@openssl.org/msg3362... [2]: http://jbp.io/2014/01/16/openssl-rand-api/ http://jbp.io/2014/01/16/openssl-rand-api/