diff --git a/dev-python/nassl/Manifest b/dev-python/nassl/Manifest
index 327346e28..710ac41df 100644
--- a/dev-python/nassl/Manifest
+++ b/dev-python/nassl/Manifest
@@ -1,6 +1,5 @@
-DIST nassl-3.1.0.tar.gz 222912 BLAKE2B c3e9c94f4e76a191889f45dbd29d8f3b08aade3780e21fa5b555d313d229e3f5f840c834ec0dee7b4904f7bb8a6a80ac787eeb11022a3e4d4dbe223469581433 SHA512 ce0ae332e0da46341e320f76cc6bdc582232f4e28d0e6212e6b140d6e8aeab6a4e11e9ef776c01243c903c19899639f35e754ed6418a3dedd22801561107c08f
-DIST nassl-4.0.0.tar.gz 220952 BLAKE2B a29671071f4d3076a0220bc09856d4cf251d906581255933d75f891f370a25abedd299801a0917f1c5cc98b004c074f3f419337af0492c63cf69d41c1732dbaa SHA512 7653cea596d349267599fd0657ae1c0428a79609405294b02d402cef63d9dd48a3ce587eef84224f638699fb58aa7d8a95fd9a8f8c445dea0541ed740801875e
 DIST nassl-4.0.1.tar.gz 212021 BLAKE2B 8e2a144a7fc65d392931b4bed0fce87edac0eb8be93ad0a746c043f7e4419a1df097f6215c4502d9ddc30622c148b251e49ae56dbcb22d6e35bf72a42c4a0f08 SHA512 6d1213bcc5a98ebcdcd3df1d87be2caec2d491c1e44ed66abddf95aaf3d56510d11342e472ccc634bcf40fab2c6dc08230561b0d7ef8ecd039cb47e64260b9d4
+DIST nassl-4.0.2.tar.gz 212003 BLAKE2B c77625487f85587cddba73c0bc85a4f9cf0a9bb8762e02dc94b260095fc9c0f043e02fbe3d2106d096b88b4afe5c1ad94b7ece9d17ecee2cb75e666a119a91f3 SHA512 c36183c5477e7de99985b7c19a4c1be14400c38148af8d231c8e35cdea5f3fda2831a06f39b763d4734b5864b3a49ad494c3e8d9d47a2ffa882e7e44369f60de
 DIST openssl-OpenSSL_1_0_2e.zip 7242974 BLAKE2B c3e2a67d60067416627d0b61e4ee465488f329e1e9730ffe9980cc075caf583021ed3439d4fc1a504e039504f4b828b144a6673155171cb088ccc80fb8b8f222 SHA512 96ec9e8eff65387238ca523b7e5b3d330098a446af86ec1772e24eda99e63ef28364b5fa32e89f4dad2a38f07da9dd2a53f93eacf8040f94e93f03297f4a0508
 DIST openssl-OpenSSL_1_1_1h.zip 11789281 BLAKE2B 365bdb007e65587de2dcf1e7e7fdbf88a9403ea1444bf103e6c2be24b389a86351f3e2042aa7df807594888790f9967c8a1133a0aaebe715d4fb2c5602eeeae6 SHA512 ae7bf96158069eba4c19f67dbaecf3408c99f2cd4f4fe8cacea998149899ab273e31304ef2e404f32ce31b1be795503f65661c9cdd0dc4fec5da5a10f91b7844
 DIST zlib-1.2.11.tar.gz 607698 BLAKE2B 6bfc4bca5dcadba8a0d4121a2b3ed0bfe440c261003521862c8e6381f1a6f0a72d3fc037351d30afd7ef321e8e8d2ec817c046ac749f2ca0c97fbdc2f7e840b7 SHA512 73fd3fff4adeccd4894084c15ddac89890cd10ef105dd5e1835e1e9bbb6a49ff229713bd197d203edfa17c2727700fce65a2a235f07568212d820dca88b528ae
diff --git a/dev-python/nassl/nassl-4.0.2.ebuild b/dev-python/nassl/nassl-4.0.2.ebuild
new file mode 100644
index 000000000..4b6a8169a
--- /dev/null
+++ b/dev-python/nassl/nassl-4.0.2.ebuild
@@ -0,0 +1,60 @@
+# Copyright 1999-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+PYTHON_COMPAT=( python3_{9..10} )
+
+inherit distutils-r1
+
+#openssl system can be used optionally
+#something to investigate in https://github.com/nabla-c0d3/sslyze/issues/101
+#see tags in "build_tasks.py" file
+MY_OPENSSL_MODERN="OpenSSL_1_1_1h"
+MY_OPENSSL_LEGACY="OpenSSL_1_0_2e"
+MY_ZLIB="zlib-1.2.11"
+
+DESCRIPTION="Experimental OpenSSL wrapper for Python 3.7+ and SSLyze"
+HOMEPAGE="https://github.com/nabla-c0d3/nassl"
+SRC_URI="https://github.com/nabla-c0d3/nassl/archive/${PV}.tar.gz -> ${P}.tar.gz
+	https://github.com/openssl/openssl/archive/${MY_OPENSSL_LEGACY}.zip -> openssl-${MY_OPENSSL_LEGACY}.zip
+	https://github.com/openssl/openssl/archive/${MY_OPENSSL_MODERN}.zip -> openssl-${MY_OPENSSL_MODERN}.zip
+	https://zlib.net/${MY_ZLIB}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="amd64 x86"
+IUSE=""
+
+RDEPEND=""
+DEPEND="${RDEPEND}
+	dev-python/invoke[${PYTHON_USEDEP}]
+	dev-python/setuptools[${PYTHON_USEDEP}]"
+
+src_prepare() {
+	rm -r tests
+
+	mkdir deps
+	ln -s "${WORKDIR}/openssl-${MY_OPENSSL_LEGACY}" "${S}/deps"
+	ln -s "${WORKDIR}/openssl-${MY_OPENSSL_MODERN}" "${S}/deps"
+	ln -s "${WORKDIR}/${MY_ZLIB}" "${S}/deps"
+
+	sed -i "s|ctx.run(\"make\")|ctx.run\(\"make -j$(makeopts_jobs)\"\)|g" build_tasks.py
+	eapply_user
+}
+
+src_compile() {
+	#FIXME: get rid of invoke and compile it using Gentoo env
+	#https://github.com/nabla-c0d3/nassl/issues/42
+	python3 /usr/bin/invoke build.zlib --do-not-clean
+	python3 /usr/bin/invoke build.legacy-openssl --do-not-clean
+	python3 /usr/bin/invoke build.modern-openssl --do-not-clean
+
+	compile_python() {
+		#https://github.com/nabla-c0d3/nassl/issues/63
+		#fails to *run* without this workaround
+		MAKEOPTS="${MAKEOPTS} -j1"
+		distutils-r1_python_compile build_ext
+	}
+	python_foreach_impl compile_python
+}
diff --git a/net-analyzer/sslyze/sslyze-5.0.2.ebuild b/net-analyzer/sslyze/sslyze-5.0.2.ebuild
index da0519e01..955cd5265 100644
--- a/net-analyzer/sslyze/sslyze-5.0.2.ebuild
+++ b/net-analyzer/sslyze/sslyze-5.0.2.ebuild
@@ -12,7 +12,7 @@ SRC_URI="https://github.com/nabla-c0d3/sslyze/archive/${PV}.tar.gz -> ${P}.tar.g
 
 LICENSE="GPL-2"
 SLOT="0"
-KEYWORDS="amd64 x86"
+KEYWORDS="amd64 ~arm64 ~x86"
 
 #It takes really long, so be patient
 distutils_enable_tests pytest