To nsopenssl is dubious in the face of nsssl's elegance and last years openssl revisions.
Free any dread from your head; Try naviserver with nsssl instead.
..but if you want, there's setting debug param in config.tcl
new year cheers