README: Recommend a strong wolfSSL configuration

1 files changed, 20 insertions, 0 deletions

diff --git a/README b/README
index 3ccb36d..060be30 100644
--- a/README
+++ b/README
@@ -9,6 +9,26 @@ functionality for use by BusyBox's wget applet.
 This utility is in no way authored by or affiliated with wolfSSL Inc. or its
 contributors.
 
+Recommended wolfSSL Configuration
+---------------------------------
+
+Building wolfSSL with the following configuration options (keeping other
+defaults) is recommended for wolfssl-util to perform as a strong modern TLS
+implementation:
+
+    --enable-opensslextra
+    --enable-maxstrength
+    --disable-aescbc
+    --disable-oldtls
+    --disable-md5
+    --enable-ocsp
+    --enable-ocspstapling
+    --enable-ocspstapling2
+    --enable-sni
+
+The test suite is written to verify the strength of wolfssl-util linked against
+wolfSSL configured with these options.
+
 Copyright
 ---------