diff --git a/include/polarssl/ssl.h b/include/polarssl/ssl.h
index 40a57a7..2201bde 100644
--- a/include/polarssl/ssl.h
+++ b/include/polarssl/ssl.h
@@ -369,7 +369,7 @@
                     unsigned char *, size_t);
 
     int do_crypt;                       /*!<  en(de)cryption flag     */
-    int *ciphersuites;                  /*!<  allowed ciphersuites    */
+    const int *ciphersuites;            /*!<  allowed ciphersuites    */
     size_t pmslen;                      /*!<  premaster length        */
     unsigned int keylen;                /*!<  symmetric key length    */
     size_t minlen;                      /*!<  min. ciphertext length  */
@@ -405,7 +405,7 @@
 extern "C" {
 #endif
 
-extern int ssl_default_ciphersuites[];
+extern const int ssl_default_ciphersuites[];
 
 #if defined(POLARSSL_SSL_HW_RECORD_ACCEL)
 extern int (*ssl_hw_record_init)(ssl_context *ssl,
@@ -577,7 +577,7 @@
  * \param ssl           SSL context
  * \param ciphersuites  0-terminated list of allowed ciphersuites
  */
-void ssl_set_ciphersuites( ssl_context *ssl, int *ciphersuites );
+void ssl_set_ciphersuites( ssl_context *ssl, const int *ciphersuites );
 
 /**
  * \brief          Set the data required to verify peer certificate