diff --git a/chapter08/openssl.xml b/chapter08/openssl.xml
index 0c3c41a7c..40a769311 100644
--- a/chapter08/openssl.xml
+++ b/chapter08/openssl.xml
@@ -65,10 +65,13 @@
 
 <screen><userinput remap="test">make test</userinput></screen>
 
-    <para>One test, 30-test_afalg.t, is known to fail on some kernel
-    configurations (depending on inconsistent values of
-    CONFIG_CRYPTO_USER_API* settings.) If it fails, it can safely be
-    ignored.</para>
+    <para>One test, 30-test_afalg.t, is known to fail if the host kernel
+    does not have <option>CONFIG_CRYPTO_USER_API_SKCIPHER</option> enabled,
+    or does not have any options providing an AES with CBC implementation
+    (for example, the combination of <option>CONFIG_CRYPTO_AES</option>
+    and <option>CONFIG_CRYPTO_CBC</option>, or
+    <option>CONFIG_CRYPTO_AES_NI_INTEL</option> if the CPU supports AES-NI)
+    enabled.  If it fails, it can safely be ignored.</para>
 
     <para>Install the package:</para>