diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index 81438c5b1..9e8547c90 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -1288,7 +1288,7 @@
 /**
  * \def MBEDTLS_SSL_RENEGOTIATION
  *
- * Disable support for TLS renegotiation.
+ * Enable support for TLS renegotiation.
  *
  * The two main uses of renegotiation are (1) refresh keys on long-lived
  * connections and (2) client authentication after the initial handshake.