Oh, and my exploit was, like, a 5 line LD_PRELOAD hack that disabled the "private key matches certificate" check in OpenSSL, ROFL.