I've written a FAQ style post with details about this issue here: https://secure.worldcommunitygrid.org/forums/wcg/viewthread_thread,38805

Let me know if there are any additional questions.

I exchanged some emails with Christian and he said that the Debian maintainers are trying to update the OpenSSL version (which would be the best fix), but a committee needs to discuss and debate the issue since this would be an upgrade of a critical library in the stable branch. If the decision is to not move forward on that, then they will add the 1024 bit certificate public keys back into the trusted root store. If that doesn't go through for some reason, then they will likely have BOINC use its own trusted certificate store (this would be the least desirable option however).

Excellent, the easiest way to resolve the problem. Maybe knreed can include this in his FAQ as recommendation, to update the point release.