> Any final words of wisdom? Other than that SSL's dependency on certificates is an enormous PITA? 8-)
Finding and deploying SSL-enabled clients will be your next big battle. Also, note that the SSLSERV code does NOT use OpenSSL as a base, so it doesn't know about any of the IBM crypto hardware. If you have lots of connect/disconnect style apps, that can hurt in terms of CPU (the initial exchange is the expensive part of a SSL handshake).
