If you need something very lightweight, to connect sockets on two systems that you control, I've liked spiped.

http://www.tarsnap.com/spiped.html

I've used this for internal ldap, etc. as it's easier than configuring a certificate authority and using TLS.