Hi again; I think I found the missing piece in the puzzle ... OOo already uses OpenSSL, but in order to replace nss we need support for xmlsecurity. This library provides just that under an MIT license:
http://www.aleksey.com/xmlsec/
Alternatively Apache has it's own stuff:
http://santuario.apache.org/
Cheers, Pedro.
