IANAL but looking at ThirdPartyNotices.txt there is MPL code, so they're probably OK with APSL. Maybe not so with LGPL though (which would rule out Apportable's otherwise excellent Foundation implementation).
It's also kind of weird they're using OpenSSL instead of Microsoft's SChannel. Usually Microsoft are pretty good at only giving you one way to hang yourself in the security department - I'm a big fan of SSPI, even if the API is occasionally unwieldy. (And as soon as I wrote that, I remembered CryptoAPI vs CNG...)
