vpnc might be added to this list - vpnc can be compiled with openssl support (which is massively useful). Presently that support is not compiled into the Fedora packages as it violates the openssl license, which is a major pain. Perhaps it could be ported to use nss, thus killing two birds with one stone?
Server Name Indication: mod_nss vs mod_ssl
NSS does not yet support SNI (upstream bug 360421), but mod_ssl does (Fedora bug 443513). I don't think mod_nss can be touted as viable replacement until this is addressed. --Ktdreyer 05:13, 27 September 2009 (UTC)