Matthius 
TlsLib4Pascal — a fully managed, from-scratch TLS 1.2 + TLS 1.3 stack written in pure Object Pascal (FreePascal/Lazarus and Delphi). No OpenSSL, no OS TLS engine — one implementation, identical on every platform. MIT licensed.
Highlights
- TLS 1.3 + hardened 1.2 — client and server, AEAD-only and forward-secret
- Post-quantum hybrid key exchange (X25519MLKEM768) on by default
- Secure by default, fail-closed — every foot-gun sits behind one loudly-named “dangerous” surface
- Full trust pipeline — PKIX validation, hostname/SAN checks, public-key pinning, stapled + live OCSP/CRL, opt-in OS system trust, mutual TLS
- Resumption, PSK & 0-RTT — 1.3 tickets, 1.2 session resumption, RFC 9258 external PSKs
- sans-IO engine — no sockets, threads, or timers baked in
Easy to plug in — three ways, all over the same engine:
- a batteries-included TTlsLib facade
- a TTlsStream over a tiny two-method transport interface
- drop-in adapters for mORMot, Indy, Synapse, and fcl-net — TLS through each stack’s own SSL seam
French
TLS pour Pascal sans Open SSL
