diff --git a/CHANGES b/CHANGES
index 77be43d5335899be687c56ee38efd610e739ffcc..325cce44a2203f816fc4e6a3881484f6a2213282 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,7 @@ OpenLDAP 2.4.11 Engineering
 	Fixed liblber ber_get_next length decoding (ITS#5580)
 	Added libldap assertion control (ITS#5560)
 	Fixed libldap GnuTLS CRL result handling (ITS#5577)
+	Fixed libldap GnuTLS SSF computation (ITS#5585)
 	Fixed slapd check for structural_class failures (ITS#5540)
 	Fixed slapd config backend renumbering (ITS#5571)
 	Fixed slapd configContext OID (ITS#5383)
diff --git a/libraries/libldap/tls.c b/libraries/libldap/tls.c
index c966628390e93157fda74ddefbd2e3864d2fb8a9..b042aec9f4f9f4dc5d63f060a881b121f1e7a5ff 100644
--- a/libraries/libldap/tls.c
+++ b/libraries/libldap/tls.c
@@ -2795,7 +2795,7 @@ ldap_pvt_tls_get_strength( void *s )
 	gnutls_cipher_algorithm_t c;
 
 	c = gnutls_cipher_get( session->session );
-	return gnutls_cipher_get_key_size( c );
+	return gnutls_cipher_get_key_size( c ) * 8;
 #else
 	return 0;
 #endif