you might take a look at 9front devtls and libsec. it does support tls1.1 and tls1.2. including ecdsa, ecdhe, both variants of chacha20-poly1305 and aes-gcm aead ciphers suits...
i updated drawterm with the code and try to keep it in sync and should not be too difficult to port back to labs plan9. -- cinap