diff --git a/IO-Socket-SSL-1.16-wildcard-typo.diff b/IO-Socket-SSL-1.16-wildcard-typo.diff
new file mode 100644
index 0000000..1881a7a
--- /dev/null
+++ b/IO-Socket-SSL-1.16-wildcard-typo.diff
@@ -0,0 +1,25 @@
+From 379f2843b96daf2f5aa575f56df5325d812056a3 Mon Sep 17 00:00:00 2001
+From: Ludwig Nussel <ludwig.nussel@suse.de>
+Date: Mon, 17 Nov 2008 14:44:02 +0100
+Subject: [PATCH] fix typo
+
+---
+ SSL.pm |    2 +-
+ 1 files changed, 1 insertions(+), 1 deletions(-)
+
+diff --git a/SSL.pm b/SSL.pm
+index 68fddf3..32c48b9 100644
+--- a/SSL.pm
++++ b/SSL.pm
+@@ -1084,7 +1084,7 @@ sub dump_peer_certificate {
+ 
+ 		if ( $scheme->{check_cn} eq 'always' or 
+ 			$scheme->{check_cn} eq 'when_only' and !$alt_dnsNames) {
+-			$check_name->($commonName,$identity,$scheme->{wildcars_in_cn})
++			$check_name->($commonName,$identity,$scheme->{wildcards_in_cn})
+ 				and return 1;
+ 		}
+ 
+-- 
+1.6.0.2
+
diff --git a/perl-IO-Socket-SSL.changes b/perl-IO-Socket-SSL.changes
index 6a23cf9..1dcf115 100644
--- a/perl-IO-Socket-SSL.changes
+++ b/perl-IO-Socket-SSL.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Nov 17 16:45:47 CET 2008 - lnussel@suse.de
+
+- fix typo that prevented wildcards in CN (bnc#445678)
+
 -------------------------------------------------------------------
 Mon Oct  6 15:05:26 CEST 2008 - anicka@suse.cz
 
diff --git a/perl-IO-Socket-SSL.spec b/perl-IO-Socket-SSL.spec
index 048fc9a..145dacb 100644
--- a/perl-IO-Socket-SSL.spec
+++ b/perl-IO-Socket-SSL.spec
@@ -21,7 +21,7 @@
 Name:           perl-IO-Socket-SSL
 BuildRequires:  perl-Net-SSLeay perl-libwww-perl
 Version:        1.16
-Release:        1
+Release:        2
 Provides:       p_iossl
 Obsoletes:      p_iossl
 Requires:       perl-Net-SSLeay perl-libwww-perl
@@ -32,6 +32,7 @@ License:        Artistic License
 Url:            http://cpan.org/modules/by-module/IO
 Summary:        IO::Socket::SSL Perl Module
 Source:         IO-Socket-SSL-%{version}.tar.bz2
+Patch:          IO-Socket-SSL-1.16-wildcard-typo.diff
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
@@ -48,6 +49,7 @@ Authors:
 
 %prep
 %setup -q -n IO-Socket-SSL-%{version}
+%patch -p1
 
 %build
 perl Makefile.PL
@@ -77,6 +79,8 @@ rm -rf $RPM_BUILD_ROOT
 /var/adm/perl-modules/%{name}
 
 %changelog
+* Mon Nov 17 2008 lnussel@suse.de
+- fix typo that prevented wildcards in CN (bnc#445678)
 * Mon Oct 06 2008 anicka@suse.cz
 - update to 1.16
   * change code for SSL_check_crl to use X509_STORE_set_flags
@@ -92,7 +96,7 @@ rm -rf $RPM_BUILD_ROOT
 * Mon Aug 18 2008 ro@suse.de
 - hack to build also in buildservice where 127.0.0.1 can
   resolve to the hostname instead of localhost
-* Mon Aug 04 2008 ro@suse.de
+* Sun Aug 03 2008 ro@suse.de
 - update require for Net_SSLeay to Net-SSLeay
 * Fri Jul 25 2008 anicka@suse.cz
 - update to 1.14