Why not https://github.com/gh2o/bash_tls ?

(requires bc, doesn't validate cert chain)