diff --git a/scripts.d/50-mbedtls.sh b/scripts.d/50-mbedtls.sh
new file mode 100755
index 0000000..ac53c4b
--- /dev/null
+++ b/scripts.d/50-mbedtls.sh
@@ -0,0 +1,28 @@
+#!/bin/bash
+
+MBEDTLS_REPO="https://github.com/ARMmbed/mbedtls.git"
+# HEAD of development_2.x
+MBEDTLS_COMMIT="766edb847696c6e0755b0e07b7161ccb9a33c948"
+
+ffbuild_enabled() {
+    [[ $TARGET == win* ]] && return -1
+    return 0
+}
+
+ffbuild_dockerbuild() {
+    git-mini-clone "$MBEDTLS_REPO" "$MBEDTLS_COMMIT" mbedtls
+    cd mbedtls
+
+    mkdir build && cd build
+
+    cmake -DCMAKE_TOOLCHAIN_FILE="$FFBUILD_CMAKE_TOOLCHAIN" -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_PREFIX="$FFBUILD_PREFIX" \
+        -DENABLE_PROGRAMS=OFF -DENABLE_TESTING=OFF \
+        -DUSE_STATIC_MBEDTLS_LIBRARY=ON -DUSE_SHARED_MBEDTLS_LIBRARY=OFF -DINSTALL_MBEDTLS_HEADERS=ON \
+        ..
+    make -j$(nproc)
+    make install
+}
+
+ffbuild_configure() {
+    echo --enable-mbedtls
+}