diff -u unbound-1.3.4/debian/control unbound-1.3.4/debian/control
--- unbound-1.3.4/debian/control
+++ unbound-1.3.4/debian/control
@@ -12,7 +12,7 @@
 Package: unbound
 Section: net
 Architecture: any
-Depends: ${misc:Depends}, ${shlibs:Depends}, adduser
+Depends: ${misc:Depends}, ${shlibs:Depends}, adduser, openssl
 Description: validating, recursive, caching DNS resolver
  Unbound is a recursive-only caching DNS server which can perform DNSSEC
  validation of results. It implements only a minimal amount of authoritative
diff -u unbound-1.3.4/debian/unbound.postinst unbound-1.3.4/debian/unbound.postinst
--- unbound-1.3.4/debian/unbound.postinst
+++ unbound-1.3.4/debian/unbound.postinst
@@ -4,6 +4,7 @@
     if ! getent passwd unbound >/dev/null; then
         adduser --quiet --system --group --no-create-home --home /var/lib/unbound unbound
         chown unbound:unbound /var/lib/unbound
+        /usr/sbin/unbound-control-setup >/dev/null 2>&1 && chown root:unbound /etc/unbound/unbound_{control,server}.{key,pem}
     fi
 fi
 
diff -u unbound-1.3.4/debian/changelog unbound-1.3.4/debian/changelog
--- unbound-1.3.4/debian/changelog
+++ unbound-1.3.4/debian/changelog
@@ -1,3 +1,12 @@
+unbound (1.3.4-1ubuntu2.1) karmic; urgency=low
+
+  * Add missing dependency on openssl used by unbound-control-setup
+    (LP: #498359)
+  * Add a postinst script to autogenerate a certificate
+    for unbound-control.
+
+ -- Simon Deziel <simon.deziel@gmail.com>  Mon, 08 Feb 2010 21:44:20 -0500
+
 unbound (1.3.4-1ubuntu2) karmic; urgency=low
 
   * Add missing build-dep on libevent-dev and adjust debian/rules to build