rpm should be ported to use NSS library for cryptography. See the tracking bug for details and links on how it could be done.
I'm working on that just now.
Created attachment 245451 [details] Patch against 4.2.2 branch
Created attachment 245941 [details] Patch against trunk
The 4.4.2 patch just went into rawhide, that ought to shake out any initial issues... It's also applied in upstream HEAD.