diff --git a/daemon/unbound.c b/daemon/unbound.c
index f1732eaef..8720a7261 100644
--- a/daemon/unbound.c
+++ b/daemon/unbound.c
@@ -52,6 +52,7 @@
 #include "util/module.h"
 #include <signal.h>
 #include <fcntl.h>
+#include <openssl/crypto.h>
 #ifdef HAVE_PWD_H
 #include <pwd.h>
 #endif
@@ -84,8 +85,9 @@ static void usage()
 	printf("-d	do not fork into the background.\n");
 	printf("-v	verbose (more times to increase verbosity)\n");
 	printf("Version %s\n", PACKAGE_VERSION);
-	printf("libevent %s, libldns %s\n", 
-		event_get_version(), ldns_version());
+	printf("libevent %s, libldns %s, %s\n", 
+		event_get_version(), ldns_version(), 
+		SSLeay_version(SSLEAY_VERSION));
 	printf("BSD licensed, see LICENSE in source package for details.\n");
 	printf("Report bugs to %s\n", PACKAGE_BUGREPORT);
 }
diff --git a/doc/Changelog b/doc/Changelog
index 711a64c9a..4bf8cf0cf 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -4,6 +4,7 @@
 	  this makes background asynchronous resolution work on windows.
 	- removed very insecure socketpair compat code. It also did not
 	  work with event_waiting. Solved by pipe replacement.
+	- unbound -h prints openssl version number as well.
 
 22 July 2008: Wouter
 	- moved pipe actions to util/tube.c. easier porting and shared code.