diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index 9f8192fd6..16ed503ca 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -1312,7 +1312,7 @@
 /**
  * \def MBEDTLS_SSL_RENEGOTIATION
  *
- * Disable support for TLS renegotiation.
+ * Enable support for TLS renegotiation.
  *
  * The two main uses of renegotiation are (1) refresh keys on long-lived
  * connections and (2) client authentication after the initial handshake.