It appears that many of the Perl modules that interface to OpenSSL are for the cryptographic aspects, not for the protocol/certificate handling, such as the 's_client' example. So, I agree with your original comments on making the interface more Perlish.