You must been living on an island over the last years. "OpenSSL was the best SSL stack for years?" Best no, only fast.

PolarSSL (now "mbed TLS") is the best, to the best definition of best.

Still better than OpenSSL, which was known to be fast but insecure and poorly managed, are the stacks used the biggest clients:

  * NSS used by Chrome, Mozilla, et al 
  * GnuTLS used by exim, GNOME, et al.

I'm not at all grateful to the OpenSSL team for using horrible software practices and putting their clients into danger.