diff --git a/include/mbedtls/check_config.h b/include/mbedtls/check_config.h
index fccf104..b3677b5 100644
--- a/include/mbedtls/check_config.h
+++ b/include/mbedtls/check_config.h
@@ -566,7 +566,7 @@
 #endif
 
 #if defined(MBEDTLS_SSL_TLS_C) && \
-    (!defined(MBEDTLS_SSL_PROTO_TLS) && !defined(MBEDTLS_SSL_PROTO_DTLS))
+    ( !defined(MBEDTLS_SSL_PROTO_TLS) && !defined(MBEDTLS_SSL_PROTO_DTLS) )
 #error "MBEDTLS_SSL_TLS_C defined, but neither TLS or DTLS is active"
 #endif
 
diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index 96cc986..e0b5ba4 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -1525,7 +1525,7 @@
  * Enable this and MBEDTLS_SSL_PROTO_TLS1_2 to enable TLS 1.2;
  * enable this and MBEDTLS_SSL_PROTO_TLS1_1 to enable TLS 1.1;
  * enable this and MBEDTLS_SSL_PROTO_TLS1   to enable TLS 1.0;
- * and/or this and MBEDTLS_SSL_PROTO_SSL3 to enable SSL 3.0 (deprecated).
+ * and/or this and MBEDTLS_SSL_PROTO_SSL3   to enable SSL 3.0 (deprecated).
  *
  * \see MBEDTLS_SSL_PROTO_DTLS
  *
diff --git a/include/mbedtls/ssl_internal.h b/include/mbedtls/ssl_internal.h
index 511715f..1c8709f 100644
--- a/include/mbedtls/ssl_internal.h
+++ b/include/mbedtls/ssl_internal.h
@@ -270,7 +270,7 @@
  * Goals for these helpers:
  *  - generate minimal code, eg don't test if mode is DTLS in a DTLS-only build
  *  - make the flow clear to the compiler, so that in TLS and DTLS combined
- *  builds, when there are two branches, it knows exactly one of them is taken
+ *    builds, when there are two branches, it knows exactly one of them is taken
  *  - preserve readability
  *
  * There are three macros: