diff -Nru pyopenssl-17.5.0/debian/changelog pyopenssl-17.5.0/debian/changelog
--- pyopenssl-17.5.0/debian/changelog	2017-12-13 05:52:40.000000000 +0100
+++ pyopenssl-17.5.0/debian/changelog	2018-05-29 16:26:51.000000000 +0200
@@ -1,3 +1,11 @@
+pyopenssl (17.5.0-1.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Add upstream patch: Don't add not supported SSL_ST_* into _all_
+    (Closes: #891727)
+
+ -- Ondřej Nový <onovy@debian.org>  Tue, 29 May 2018 16:26:51 +0200
+
 pyopenssl (17.5.0-1) unstable; urgency=medium
 
   * New upstream release
diff -Nru pyopenssl-17.5.0/debian/patches/0003-Don-t-add-not-supported-SSL_ST_-into-_all_.patch pyopenssl-17.5.0/debian/patches/0003-Don-t-add-not-supported-SSL_ST_-into-_all_.patch
--- pyopenssl-17.5.0/debian/patches/0003-Don-t-add-not-supported-SSL_ST_-into-_all_.patch	1970-01-01 01:00:00.000000000 +0100
+++ pyopenssl-17.5.0/debian/patches/0003-Don-t-add-not-supported-SSL_ST_-into-_all_.patch	2018-05-29 16:26:51.000000000 +0200
@@ -0,0 +1,38 @@
+From 6e8bdca4fcc67154a7f96adce5825319e211f517 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Ond=C5=99ej=20Nov=C3=BD?= <onovy@debian.org>
+Date: Thu, 1 Mar 2018 14:56:53 +0100
+Subject: Don't add not supported SSL_ST_* into _all_
+
+Origin: https://github.com/pyca/pyopenssl/commit/993c4e4afc4274019bdb835b64191afeed6c13b7
+---
+ src/OpenSSL/SSL.py | 10 ++++++----
+ 1 file changed, 6 insertions(+), 4 deletions(-)
+
+diff --git a/src/OpenSSL/SSL.py b/src/OpenSSL/SSL.py
+index b664254..fce973a 100644
+--- a/src/OpenSSL/SSL.py
++++ b/src/OpenSSL/SSL.py
+@@ -87,10 +87,6 @@ __all__ = [
+     'SSL_ST_CONNECT',
+     'SSL_ST_ACCEPT',
+     'SSL_ST_MASK',
+-    'SSL_ST_INIT',
+-    'SSL_ST_BEFORE',
+-    'SSL_ST_OK',
+-    'SSL_ST_RENEGOTIATE',
+     'SSL_CB_LOOP',
+     'SSL_CB_EXIT',
+     'SSL_CB_READ',
+@@ -206,6 +202,12 @@ if _lib.Cryptography_HAS_SSL_ST:
+     SSL_ST_BEFORE = _lib.SSL_ST_BEFORE
+     SSL_ST_OK = _lib.SSL_ST_OK
+     SSL_ST_RENEGOTIATE = _lib.SSL_ST_RENEGOTIATE
++    __all__.extend([
++        'SSL_ST_INIT',
++        'SSL_ST_BEFORE',
++        'SSL_ST_OK',
++        'SSL_ST_RENEGOTIATE',
++    ])
+ 
+ SSL_CB_LOOP = _lib.SSL_CB_LOOP
+ SSL_CB_EXIT = _lib.SSL_CB_EXIT
diff -Nru pyopenssl-17.5.0/debian/patches/series pyopenssl-17.5.0/debian/patches/series
--- pyopenssl-17.5.0/debian/patches/series	2017-12-13 05:52:40.000000000 +0100
+++ pyopenssl-17.5.0/debian/patches/series	2018-05-29 16:26:51.000000000 +0200
@@ -1,2 +1,3 @@
 0001-disable-test_set_default_verify_paths-since-it-tries.patch
 0002-pass-PYTHONPATH-when-building-HTML-doc.patch
+0003-Don-t-add-not-supported-SSL_ST_-into-_all_.patch