2) curl bug was supposed to be fixed and reappeared several times, last reincarnation is http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818126 (affects jessie, supposed to be fixed in stretch/sid).
1) There are no ssl-specific code in transmission, it is dealt with in
curl. So, if any, it is a *curl* bug that affects transmission;

