nsopenssl caveat:
For compatibility with Macs (for as yet undetermined reasons), you need to turn off SSLv3 with the nsd.ini directive Protocol=SSLv2 (.tcl set protocol "SSLv2").
Since SSLv2 has obscure but real security problems, anyone who speaks C is Strongly Encouraged to help Scott track down and kill this beast. All I can do is whine that it still doesn't work (though the workaround does fine).
The "official" nsssl doesn't even try to support SSLv3, so you won't do better by finding a "bootleg" copy. nsopenssl has been completely stable for us in SSLv2 mode.
