I don't know PolarSSL. If it's a reasonably complete implementation then maybe it deserves more attention.