* Bastien ROUCARIES: > Fedora created a open SSL compat library based on libnss. It doesn't work all that well because there is no way to implement host name checking. The OpenSSL API it's based on did not have an interface for host name verification, and the compatibility library does not duplicate enough of OpenSSL's ASN.1-related functionality so that applications can implement the verification themselves.