gwenhywfar should be ported to use NSS library for cryptography. See the tracking bug for details and links on how it could be done.
gwen uses: a) CRL code b) info and verify callbacks c) bio Ergo, don't think a straight port is really appropriate.
These are pretty much the same things that libcurl, stunnel and a few others use. nsscompatossl has support for info/verify and some bio callbacks. CRL's are handled by ifdefing out the SSL crl code since NSS support CRL's internally automomatically. bob