From 7791b8ff4dee3b0dfae1bd9b715aaa498b59dca8 Mon Sep 17 00:00:00 2001
From: Juliusz Sosinowicz <juliusz@wolfssl.com>
Date: Fri, 24 Mar 2023 16:42:56 +0100
Subject: [PATCH] Add config option

---
 configure.ac | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/configure.ac b/configure.ac
index 884583ae8..4bd23105e 100644
--- a/configure.ac
+++ b/configure.ac
@@ -177,6 +177,17 @@ AS_IF([test "$ax_enable_debug" = "yes"],
 # enabled
 ENABLED_CERTS="no"
 
+# Implements requirements from RFC9325
+AC_ARG_ENABLE([harden-tls],
+    [AS_HELP_STRING([--enable-harden-tls],[Enable requirements from RFC9325 (default: disabled)])],
+    [ ENABLED_HARDEN_TLS=$enableval ],
+    [ ENABLED_HARDEN_TLS=no ]
+    )
+
+if test "x$ENABLED_HARDEN_TLS" != "xno"
+then
+    AM_CFLAGS="$AM_CFLAGS -DWOLFSSL_HARDEN_TLS"
+fi
 
 # Support for forcing 32-bit mode
 # To force 32-bit instructions use: