diff -Nru openssl-blacklist-0.4.2/debian/changelog openssl-blacklist-0.4.2ubuntu1/debian/changelog
--- openssl-blacklist-0.4.2/debian/changelog	2008-06-18 00:28:05.000000000 +0200
+++ openssl-blacklist-0.4.2ubuntu1/debian/changelog	2009-04-06 14:37:54.000000000 +0200
@@ -1,3 +1,10 @@
+openssl-blacklist (0.4.2ubuntu1) jaunty; urgency=low
+
+  * openssl-vulnkey: Use hashlib python module (instead of sha module) to
+    avoid a DeprecationWarning when starting up openvpn (LP: #352170)
+
+ -- Thierry Carrez <thierry.carrez@ubuntu.com>  Mon, 06 Apr 2009 14:35:47 +0200
+
 openssl-blacklist (0.4.2) unstable; urgency=low
 
   * Add openssl to the Build-Deps, since it is required for the tests.
diff -Nru openssl-blacklist-0.4.2/debian/control openssl-blacklist-0.4.2ubuntu1/debian/control
--- openssl-blacklist-0.4.2/debian/control	2008-06-18 00:28:24.000000000 +0200
+++ openssl-blacklist-0.4.2ubuntu1/debian/control	2009-04-06 14:38:45.000000000 +0200
@@ -2,7 +2,8 @@
 Section: net
 XS-Python-Version: all
 Priority: optional
-Maintainer: Kees Cook <kees@outflux.net>
+Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss@lists.ubuntu.com>
+XSBC-Original-Maintainer: Kees Cook <kees@outflux.net>
 Uploaders: Jamie Strandboge <jamie@ubuntu.com>, Christoph Martin <christoph.martin@uni-mainz.de>
 Build-Depends: debhelper (>= 5.0.38), python-central (>= 0.5.6), openssl (>= 0.9.8g-9)
 Standards-Version: 3.8.0.0
diff -Nru openssl-blacklist-0.4.2/openssl-vulnkey openssl-blacklist-0.4.2ubuntu1/openssl-vulnkey
--- openssl-blacklist-0.4.2/openssl-vulnkey	2008-06-16 19:59:04.000000000 +0200
+++ openssl-blacklist-0.4.2ubuntu1/openssl-vulnkey	2009-04-06 14:35:40.000000000 +0200
@@ -21,7 +21,7 @@
 from optparse import OptionParser
 import os
 import re
-import sha
+import hashlib
 import subprocess
 import sys
 import tempfile
@@ -133,7 +133,7 @@
         db_lines = fh.read().split('\n')
         fh.close()
 
-    key = sha.sha(modulus).hexdigest()
+    key = hashlib.sha1(modulus).hexdigest()
     #print "bits: %s\nmodulus: %s\nkey: %s\nkey80: %s" % (bits, modulus, key, key[20:])
     if key[20:] in db_lines:
         if not options.quiet: