@@ -245,10 +245,38 @@
 
 
 #--------------------------------------------------------------------
 # Custom
 #--------------------------------------------------------------------
+
+dnl Disable support for TLS 1.0
+AC_ARG_ENABLE([tls1], AS_HELP_STRING([--disable-tls1], [disable TLS1 support]), [
+	if test "${enableval}" = "no"; then
+		AC_DEFINE([NO_TLS1], [1], [Disable TLS1 support])
+	fi
+])
+
+dnl Disable support for TLS 1.1
+AC_ARG_ENABLE([tls1_1], AS_HELP_STRING([--disable-tls1_1], [disable TLS1.1 support]), [
+	if test "${enableval}" = "no"; then
+		AC_DEFINE([NO_TLS1_1], [1], [Disable TLS1.1 support])
+	fi
+])
+
+dnl Disable support for TLS 1.2
+AC_ARG_ENABLE([tls1_2], AS_HELP_STRING([--disable-tls1_2], [disable TLS1.2 support]), [
+	if test "${enableval}" = "no"; then
+		AC_DEFINE([NO_TLS1_2], [1], [Disable TLS1.2 support])
+	fi
+])
+
+dnl Disable support for TLS 1.3
+AC_ARG_ENABLE([tls1_3], AS_HELP_STRING([--disable-tls1_3], [disable TLS1.3 support]), [
+	if test "${enableval}" = "no"; then
+		AC_DEFINE([NO_TLS1_3], [1], [Disable TLS1.3 support])
+	fi
+])
 
 dnl Enable support for building the same library every time
 tcltls_deterministic='false'
 AC_ARG_ENABLE([deterministic], AS_HELP_STRING([--enable-deterministic], [enable deterministic parameters]), [
 	if test "$enableval" = "yes"; then
@@ -262,16 +290,11 @@
 fi
 
 
 dnl Enable support for specifying pre-computed DH params size
 AC_ARG_WITH([builtin-dh-params-size], AS_HELP_STRING([--with-builtin-dh-params-size=<bits>], [specify the size of the built-in, precomputed, DH params]), [
-	AS_CASE([$withval],
-		[2048|4096|8192],,
-		[
-			AC_MSG_ERROR([Unsupported DH params size: $withval])
-		]
-	)
+	AS_CASE([$withval],[2048|4096|8192],,[AC_MSG_ERROR([Unsupported DH params size: $withval])])
 	GEN_DH_PARAMS_ARGS="${GEN_DH_PARAMS_ARGS} bits=$withval"
 ])
 AC_SUBST(GEN_DH_PARAMS_ARGS)