diff --git a/srcpkgs/libressl/patches/certhash-compare.patch b/srcpkgs/libressl/patches/certhash-compare.patch
new file mode 100644
index 00000000000..d28ebc7e5be
--- /dev/null
+++ b/srcpkgs/libressl/patches/certhash-compare.patch
@@ -0,0 +1,14 @@
+subtraction is not comparison
+http://www.tedunangst.com/flak/post/subtraction-is-not-comparison
+
+--- apps/certhash.c	2015-02-27 16:11:46.000000000 +0100
++++ apps/certhash.c	2015-03-05 13:45:15.832647817 +0100
+@@ -121,7 +121,7 @@
+ 	struct hashinfo *hib = *(struct hashinfo **)b;
+ 	int rv;
+ 
+-	rv = hia->hash - hib->hash;
++	rv = hia->hash < hib->hash ? -1 : hia->hash > hib->hash;
+ 	if (rv != 0)
+ 		return (rv);
+ 	rv = memcmp(hia->fingerprint, hib->fingerprint,
diff --git a/srcpkgs/libressl/template b/srcpkgs/libressl/template
index 14b3f1ed1bd..fc6abeed01d 100644
--- a/srcpkgs/libressl/template
+++ b/srcpkgs/libressl/template
@@ -1,7 +1,7 @@
 # Template file for 'libressl'
 pkgname=libressl
 version=2.1.4
-revision=1
+revision=2
 bootstrap=yes
 build_style=gnu-configure
 configure_args="--enable-libtls"