diff --git a/pkgs/development/libraries/mbedtls/default.nix b/pkgs/development/libraries/mbedtls/default.nix
new file mode 100644
index 000000000000..1b0c1186f287
--- /dev/null
+++ b/pkgs/development/libraries/mbedtls/default.nix
@@ -0,0 +1,41 @@
+{ stdenv, fetchurl, perl }:
+
+stdenv.mkDerivation rec {
+  name = "mbedtls-1.3.10";
+
+  src = fetchurl {
+    url = "https://polarssl.org/download/${name}-gpl.tgz";
+    sha256 = "0zj0vdmam52hk7c6s3y81bdb4mqawi9fskkcqlgnj8v61j7dhvvl";
+  };
+
+  nativeBuildInputs = [ perl ];
+
+  postPatch = ''
+    patchShebangs .
+  '';
+
+  makeFlags = [
+    "SHARED=1"
+  ];
+
+  installFlags = [
+    "DESTDIR=\${out}"
+  ];
+
+  postInstall = ''
+    rm $out/lib/lib{mbedtls.so.8,polarssl.{a,so}}
+    ln -s libmbedtls.so $out/lib/libmbedtls.so.8
+    ln -s libmbedtls.so $out/lib/libpolarssl.so
+    ln -s libmbedtls.a $out/lib/libpolarssl.a
+  '';
+
+  doCheck = true;
+
+  meta = with stdenv.lib; {
+    homepage = https://polarssl.org/;
+    description = "Portable cryptographic and SSL/TLS library, aka polarssl";
+    license = licenses.gpl3;
+    platforms = platforms.all;
+    maintainers = with maintainers; [ wkennington ];
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index f49d6b2198d6..4b910aa59733 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -6956,6 +6956,8 @@ let
 
   matio = callPackage ../development/libraries/matio { };
 
+  mbedtls = callPackage ../development/libraries/mbedtls { };
+
   mdds_0_7_1 = callPackage ../development/libraries/mdds/0.7.1.nix { };
   mdds = callPackage ../development/libraries/mdds { };
 
@@ -7240,6 +7242,8 @@ let
 
   poker-eval = callPackage ../development/libraries/poker-eval { };
 
+  polarssl = mbedtls;
+
   polkit = callPackage ../development/libraries/polkit {
     spidermonkey = spidermonkey_17;
   };