diff --git a/lib/net/http.rb b/lib/net/http.rb
index f64f7ba7..007bd95c 100644
--- a/lib/net/http.rb
+++ b/lib/net/http.rb
@@ -660,6 +660,10 @@ class HTTPHeaderSyntaxError < StandardError; end
   #   Sets the minimum SSL version.
   # - {#peer_cert}[rdoc-ref:Net::HTTP#peer_cert]:
   #   Returns the X509 certificate chain for the session's socket peer.
+  # - {:security_level}[rdoc-ref:Net::HTTP#security_level]:
+  #   Returns the SSL security level.
+  # - {:security_level=}[rdoc-ref:Net::HTTP#security_level=]:
+  #   Sets the SSL security level.
   # - {:ssl_version}[rdoc-ref:Net::HTTP#ssl_version]:
   #   Returns the SSL version.
   # - {:ssl_version=}[rdoc-ref:Net::HTTP#ssl_version=]:
@@ -1031,6 +1035,7 @@ def HTTP.socket_type   #:nodoc: obsolete
     # - #key
     # - #open_timeout
     # - #read_timeout
+    # - #security_level
     # - #ssl_timeout
     # - #ssl_version
     # - +use_ssl+ (calls #use_ssl=)
@@ -1519,6 +1524,7 @@ def use_ssl=(flag)
       :ciphers,
       :extra_chain_cert,
       :key,
+      :security_level,
       :ssl_timeout,
       :ssl_version,
       :min_version,
@@ -1556,6 +1562,10 @@ def use_ssl=(flag)
     # Sets or returns the OpenSSL::PKey::RSA or OpenSSL::PKey::DSA object.
     attr_accessor :key
 
+    # Sets or returns the SSL security level.
+    # See {OpenSSL::SSL::SSLContext#security_level=}[OpenSSL::SSL::SSL::Context#security_level=].
+    attr_accessor :security_level
+
     # Sets or returns the SSL timeout seconds.
     attr_accessor :ssl_timeout
 
diff --git a/test/net/http/test_https.rb b/test/net/http/test_https.rb
index e860c874..7d12bba1 100644
--- a/test/net/http/test_https.rb
+++ b/test/net/http/test_https.rb
@@ -286,6 +286,17 @@ def test_max_version
     assert_match(re_msg, ex.message)
   end
 
+  def test_security_level
+    http = Net::HTTP.new(HOST, config("port"))
+    http.use_ssl = true
+    http.security_level = 3
+    http.cert_store = TEST_STORE
+    ex = assert_raise(OpenSSL::SSL::SSLError){
+      http.request_get("/") {|res| }
+    }
+    assert_match(/certificate verify failed/, ex.message)
+  end
+
 end if defined?(OpenSSL::SSL)
 
 class TestNetHTTPSIdentityVerifyFailure < Test::Unit::TestCase