From Fedora Project Wiki
vpnc might be added to this list - vpnc can be compiled with openssl support (which is massively useful). Presently that support is not compiled into the Fedora packages as it violates the openssl license, which is a major pain. Perhaps it could be ported to use nss, thus killing two birds with one stone?