diff --git a/package/openssl/openssl.mk b/package/openssl/openssl.mk
index 00baeddb76..1b220bbb9f 100644
--- a/package/openssl/openssl.mk
+++ b/package/openssl/openssl.mk
@@ -32,9 +32,10 @@ $(OPENSSL_DIR)/.unpacked: $(DL_DIR)/$(OPENSSL_SOURCE)
 	$(OPENSSL_CAT) $(DL_DIR)/$(OPENSSL_SOURCE) | tar -C $(BUILD_DIR) $(TAR_OPTIONS) -
 	toolchain/patch-kernel.sh $(OPENSSL_DIR) package/openssl/ openssl\*.patch
 	# sigh... we have to resort to this just to set a gcc flag.
+	# grumble.. and of course make sure to escape any '/' in CFLAGS
 	$(SED) 's,/CFLAG=,/CFLAG= $(TARGET_SOFT_FLOAT) ,g' \
 		$(OPENSSL_DIR)/Configure
-	$(SED) '/CFLAG=/s,/;, $(TARGET_CFLAGS)/;,' \
+	$(SED) '/CFLAG=/s,/;, $(shell echo '$(TARGET_CFLAGS)' | sed -e 's/\//\\\\\//g')/;,' \
 		$(OPENSSL_DIR)/Configure
 	touch $(OPENSSL_DIR)/.unpacked