diff --git a/security/hs-tls/Makefile b/security/hs-tls/Makefile
new file mode 100644
index 00000000000..5a056818883
--- /dev/null
+++ b/security/hs-tls/Makefile
@@ -0,0 +1,30 @@
+# $OpenBSD: Makefile,v 1.1.1.1 2010/12/09 16:07:50 jasper Exp $
+
+COMMENT=		TLS/SSL protocol native implementation
+
+DISTNAME=		tls-0.3.1
+CATEGORIES=		security net
+
+MAINTAINER=		Jasper Lievisse Adriaanse <jasper@openbsd.org>
+
+# BSD3
+PERMIT_PACKAGE_CDROM =	Yes
+PERMIT_PACKAGE_FTP =	Yes
+PERMIT_DISTFILES_CDROM =Yes
+PERMIT_DISTFILES_FTP =	Yes
+
+MODULES=		lang/ghc
+
+MODGHC_BUILD =          cabal hackage haddock register
+
+RUN_DEPENDS =		devel/hs-binary>=0.5 \
+			devel/hs-cereal>=0.3 \
+			devel/hs-vector \
+			security/hs-AES \
+			security/hs-crypto-api>=0.2 \
+			security/hs-certificate>=0.3.2 \
+			security/hs-cryptocipher>=0.2 \
+			security/hs-cryptohash>=0.6
+BUILD_DEPENDS = 	${RUN_DEPENDS}
+
+.include <bsd.port.mk>
diff --git a/security/hs-tls/distinfo b/security/hs-tls/distinfo
new file mode 100644
index 00000000000..bc17b7cf5d8
--- /dev/null
+++ b/security/hs-tls/distinfo
@@ -0,0 +1,5 @@
+MD5 (tls-0.3.1.tar.gz) = 6hgVR1xFomaQyTEDQw2Vlg==
+RMD160 (tls-0.3.1.tar.gz) = l2V0V8/H5ybLjuB/Fk9zdLWHJmk=
+SHA1 (tls-0.3.1.tar.gz) = g8XJu+NMq1fg0iuCufObsewbNZs=
+SHA256 (tls-0.3.1.tar.gz) = 8r5hoIZOe9hAUZvghHOMncX5WqVMzny3OY8rRZbKfAo=
+SIZE (tls-0.3.1.tar.gz) = 28179
diff --git a/security/hs-tls/pkg/DESCR b/security/hs-tls/pkg/DESCR
new file mode 100644
index 00000000000..9b994eea6c7
--- /dev/null
+++ b/security/hs-tls/pkg/DESCR
@@ -0,0 +1,8 @@
+Native TLS protocol implementation, focusing on purity and more
+type-checking.
+
+Currently implement the SSL3.0, TLS1.0 and TLS1.1 protocol. Not yet
+properly secure and missing some features. Do not yet use as replacement
+to more mature implementation.
+
+Only RSA supported as Key exchange for now.
diff --git a/security/hs-tls/pkg/PLIST b/security/hs-tls/pkg/PLIST
new file mode 100644
index 00000000000..b377697c9cf
--- /dev/null
+++ b/security/hs-tls/pkg/PLIST
@@ -0,0 +1,71 @@
+@comment $OpenBSD: PLIST,v 1.1.1.1 2010/12/09 16:07:50 jasper Exp $
+lib/ghc/${DISTNAME}/
+lib/ghc/${DISTNAME}/HS${DISTNAME}.o
+lib/ghc/${DISTNAME}/Network/
+lib/ghc/${DISTNAME}/Network/TLS/
+lib/ghc/${DISTNAME}/Network/TLS/Cap.hi
+lib/ghc/${DISTNAME}/Network/TLS/Cipher.hi
+lib/ghc/${DISTNAME}/Network/TLS/Client.hi
+lib/ghc/${DISTNAME}/Network/TLS/Compression.hi
+lib/ghc/${DISTNAME}/Network/TLS/Crypto.hi
+lib/ghc/${DISTNAME}/Network/TLS/MAC.hi
+lib/ghc/${DISTNAME}/Network/TLS/Packet.hi
+lib/ghc/${DISTNAME}/Network/TLS/Receiving.hi
+lib/ghc/${DISTNAME}/Network/TLS/SRandom.hi
+lib/ghc/${DISTNAME}/Network/TLS/Sending.hi
+lib/ghc/${DISTNAME}/Network/TLS/Server.hi
+lib/ghc/${DISTNAME}/Network/TLS/State.hi
+lib/ghc/${DISTNAME}/Network/TLS/Struct.hi
+lib/ghc/${DISTNAME}/Network/TLS/Util.hi
+lib/ghc/${DISTNAME}/Network/TLS/Wire.hi
+lib/ghc/${DISTNAME}/libHS${DISTNAME}.a
+lib/ghc/${DISTNAME}/register.sh
+@exec /usr/bin/env HOME=/nonexistent %D/lib/ghc/${DISTNAME}/register.sh -v0
+@unexec /usr/bin/env HOME=/nonexistent %D/lib/ghc/${DISTNAME}/unregister.sh -v0 --force
+lib/ghc/${DISTNAME}/unregister.sh
+share/doc/hs-${DISTNAME}/
+share/doc/hs-${DISTNAME}/LICENSE
+share/doc/hs-${DISTNAME}/html/
+share/doc/hs-${DISTNAME}/html/Network-TLS-Cipher.html
+share/doc/hs-${DISTNAME}/html/Network-TLS-Client.html
+share/doc/hs-${DISTNAME}/html/Network-TLS-MAC.html
+share/doc/hs-${DISTNAME}/html/Network-TLS-SRandom.html
+share/doc/hs-${DISTNAME}/html/Network-TLS-Server.html
+share/doc/hs-${DISTNAME}/html/Network-TLS-Struct.html
+share/doc/hs-${DISTNAME}/html/doc-index-A.html
+share/doc/hs-${DISTNAME}/html/doc-index-B.html
+share/doc/hs-${DISTNAME}/html/doc-index-C.html
+share/doc/hs-${DISTNAME}/html/doc-index-D.html
+share/doc/hs-${DISTNAME}/html/doc-index-E.html
+share/doc/hs-${DISTNAME}/html/doc-index-F.html
+share/doc/hs-${DISTNAME}/html/doc-index-G.html
+share/doc/hs-${DISTNAME}/html/doc-index-H.html
+share/doc/hs-${DISTNAME}/html/doc-index-I.html
+share/doc/hs-${DISTNAME}/html/doc-index-L.html
+share/doc/hs-${DISTNAME}/html/doc-index-M.html
+share/doc/hs-${DISTNAME}/html/doc-index-N.html
+share/doc/hs-${DISTNAME}/html/doc-index-P.html
+share/doc/hs-${DISTNAME}/html/doc-index-R.html
+share/doc/hs-${DISTNAME}/html/doc-index-S.html
+share/doc/hs-${DISTNAME}/html/doc-index-T.html
+share/doc/hs-${DISTNAME}/html/doc-index-U.html
+share/doc/hs-${DISTNAME}/html/doc-index-V.html
+share/doc/hs-${DISTNAME}/html/doc-index.html
+share/doc/hs-${DISTNAME}/html/frames.html
+share/doc/hs-${DISTNAME}/html/haddock-util.js
+share/doc/hs-${DISTNAME}/html/haddock.css
+share/doc/hs-${DISTNAME}/html/haskell_icon.gif
+share/doc/hs-${DISTNAME}/html/index-frames.html
+share/doc/hs-${DISTNAME}/html/index.html
+share/doc/hs-${DISTNAME}/html/mini_Network-TLS-Cipher.html
+share/doc/hs-${DISTNAME}/html/mini_Network-TLS-Client.html
+share/doc/hs-${DISTNAME}/html/mini_Network-TLS-MAC.html
+share/doc/hs-${DISTNAME}/html/mini_Network-TLS-SRandom.html
+share/doc/hs-${DISTNAME}/html/mini_Network-TLS-Server.html
+share/doc/hs-${DISTNAME}/html/mini_Network-TLS-Struct.html
+share/doc/hs-${DISTNAME}/html/minus.gif
+share/doc/hs-${DISTNAME}/html/plus.gif
+share/doc/hs-${DISTNAME}/html/tls.haddock
+share/hs-${DISTNAME}/
+share/hs-${DISTNAME}/README
+share/hs-${DISTNAME}/TODO
diff --git a/security/hs-tls/pkg/SECURITY b/security/hs-tls/pkg/SECURITY
new file mode 100644
index 00000000000..c67ab741bac
--- /dev/null
+++ b/security/hs-tls/pkg/SECURITY
@@ -0,0 +1,2 @@
+Upstream designates their own code as being alpha, so it's advised not
+to use this code in production code just yet.