diff --git a/library/ssl_client.h b/library/ssl_client.h
index 8e0c216..3c01bbf 100644
--- a/library/ssl_client.h
+++ b/library/ssl_client.h
@@ -28,6 +28,21 @@
 
 #include <stddef.h>
 
+/**
+ * \brief Validate cipher suite against config in SSL context.
+ *
+ * \param ssl            SSL context
+ * \param suite_info     Cipher suite to validate
+ * \param min_minor_ver  Minimal minor version to accept a cipher suite
+ * \param max_minor_ver  Maximal minor version to accept a cipher suite
+ *
+ * \return 0 if valid, negative value otherwise.
+ */
+int mbedtls_ssl_validate_ciphersuite(
+    const mbedtls_ssl_context *ssl,
+    const mbedtls_ssl_ciphersuite_t *suite_info,
+    int min_minor_ver, int max_minor_ver );
+
 int mbedtls_ssl_write_client_hello( mbedtls_ssl_context *ssl );
 
 #endif /* MBEDTLS_SSL_CLIENT_H */