From 7ba4542176a2b91d3d6d906fd1ab98745f5bc0ee Mon Sep 17 00:00:00 2001
From: Patrick McDermott <patrick.mcdermott@libiquity.com>
Date: Sat, 03 Aug 2019 02:51:14 -0400
Subject: README: Recommend a strong wolfSSL configuration

---
diff --git a/README b/README
index 3ccb36d..060be30 100644
--- a/README
+++ b/README
@@ -9,6 +9,26 @@ functionality for use by BusyBox's wget applet.
 This utility is in no way authored by or affiliated with wolfSSL Inc. or its
 contributors.
 
+Recommended wolfSSL Configuration
+---------------------------------
+
+Building wolfSSL with the following configuration options (keeping other
+defaults) is recommended for wolfssl-util to perform as a strong modern TLS
+implementation:
+
+    --enable-opensslextra
+    --enable-maxstrength
+    --disable-aescbc
+    --disable-oldtls
+    --disable-md5
+    --enable-ocsp
+    --enable-ocspstapling
+    --enable-ocspstapling2
+    --enable-sni
+
+The test suite is written to verify the strength of wolfssl-util linked against
+wolfSSL configured with these options.
+
 Copyright
 ---------
 
--
cgit v0.9.1