BearSSL is still in beta, but looks very solid already. If all else fails…