This sounds like a great way to make it work simply and nicely. :-) (While avoiding messy with NSS, which is always painful.)Thats an interesting patch, it all runs off the "openssl" command, didn't know it could do all that ... then again i didn't even know it existed. Jeff, perhaps this is the answer? :)
At some point we should probably look into that?..
-- Ettore