diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 6678b7133a..28be8a6fba 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -1355,6 +1355,11 @@ static int ssl_conf_check(const mbedtls_ssl_context *ssl)
     }
 #endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
 
+    if (ssl->conf->f_rng == NULL) {
+        MBEDTLS_SSL_DEBUG_MSG(1, ("no RNG provided"));
+        return MBEDTLS_ERR_SSL_NO_RNG;
+    }
+
     /* Space for further checks */
 
     return 0;