openswan should be ported to use NSS library for cryptography. See the tracking bug for details and links on how it could be done.
This is already done in the current release, so closing this bz.