openssl supports TLS extensions since 0.9.8f (the most interesting probably Server Name Indication, which allows more than one ssl cert per ip). It requires a configure flag enable-tlsext.
added to 0.9.8g