Comment 1 for bug 1200290

This is something I'll consider for version 1.3.

Going through the list of TLS implementations there is only one that matches both our requirements.

CyaSSL, MatrixSSL and PolarSSL are GPL/commercial so are not suitable.
GnuTLS is LGPL, but is of a similar size to openssl.
NSS is huge, doesn't seem to have many examples and is poorly documented (at least openssl has wide usage even if the docs are poor)

axTLS is BSD licensed and is small. It doesn't support TLS-PSK which is a shame, but that is a sacrifice that can be made.