With all the noise about the OpenSSL vulnerability, see this blog about how to prepare for mitigation when the patch is released.