diff --git a/lib/maintainers.nix b/lib/maintainers.nix
index 93e96b9524ec..e7931b928b3c 100644
--- a/lib/maintainers.nix
+++ b/lib/maintainers.nix
@@ -188,6 +188,7 @@
   matthiasbeyer = "Matthias Beyer <mail@beyermatthias.de>";
   mbakke = "Marius Bakke <ymse@tuta.io>";
   mbe = "Brandon Edens <brandonedens@gmail.com>";
+  mcmtroffaes = "Matthias C. M. Troffaes <matthias.troffaes@gmail.com>";
   meditans = "Carlo Nucera <meditans@gmail.com>";
   meisternu = "Matt Miemiec <meister@krutt.org>";
   michelk = "Michel Kuhlmann <michel@kuhlmanns.info>";
diff --git a/pkgs/development/libraries/wolfssl/default.nix b/pkgs/development/libraries/wolfssl/default.nix
new file mode 100644
index 000000000000..3a6f8873b84f
--- /dev/null
+++ b/pkgs/development/libraries/wolfssl/default.nix
@@ -0,0 +1,24 @@
+{ stdenv, fetchurl, autoconf, automake, libtool }:
+
+stdenv.mkDerivation rec {
+  name = "wolfssl-${version}";
+  version = "3.7.0";
+
+  src = fetchurl {
+    url    = "https://github.com/wolfSSL/wolfssl/archive/v${version}.tar.gz";
+    sha256 = "1r1awivral4xjjvnna9lrfz2rh84rcbp04834rymbsz0kbyykgb6";
+  };
+
+  nativeBuildInputs = [ autoconf automake libtool ];
+
+  preConfigure = ''
+    ./autogen.sh
+  '';
+
+  meta = with stdenv.lib; {
+    description = "A small, fast, portable implementation of TLS/SSL for embedded devices.";
+    homepage    = "https://www.wolfssl.com/";
+    platforms   = platforms.all;
+    maintainers = with maintainers; [ mcmtroffaes ];
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index c4c9749496fd..760f3309be34 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -7948,6 +7948,8 @@ let
 
   boringssl = callPackage ../development/libraries/boringssl { };
 
+  wolfssl = callPackage ../development/libraries/wolfssl { };
+
   openssl = callPackage ../development/libraries/openssl {
     fetchurl = fetchurlBoot;
     cryptodevHeaders = linuxPackages.cryptodev.override {