Disable the enforce flag by default
diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 27e55d9..1f8690a 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -10302,7 +10302,7 @@
 #if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
     conf->extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
     conf->enforce_extended_master_secret =
-        MBEDTLS_SSL_EXTENDED_MS_ENFORCE_ENABLED;
+        MBEDTLS_SSL_EXTENDED_MS_ENFORCE_DISABLED;
 #endif
 
 #if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING)