Pretty much the entire globe uses OpenSSL. After that it's GnuTLS, which is primarily used only by the GNOME Project, and most notably CUPS, but that's about it.
Apple rolls their own, I believe, though I'm not sure. It might simply be an Obj-C wrapper around OpenSSL.
Funny thing is all three of these SSL implementations have had critical bugs all within this year.
Yeah funny how SSL/TLS is slowly loosing it's status as uncrackable, eventhough it are all implementation issues thus far.
But apart from CRIME, which was not so big, this is the first real server side vuln, massive impact.
I have been doing some tests myself and found major gov websites to still be vuln as we speak.
Parties like google amongst other players seem to have patched already.
