you might take a look at 9front devtls and libsec. it does support
tls1.1 and tls1.2. including ecdsa, ecdhe, both variants of
chacha20-poly1305 and aes-gcm aead ciphers suits...

i updated drawterm with the code and try to keep it in sync and
should not be too difficult to port back to labs plan9.