diff --git a/components/ssl/Kconfig b/components/ssl/Kconfig
index 8ac28716..647a978b 100644
--- a/components/ssl/Kconfig
+++ b/components/ssl/Kconfig
@@ -381,6 +381,12 @@ config MBEDTLS_ECDH_C
     help
         Enable ECDH. Needed to use ECDHE-xxx TLS ciphersuites.
 
+config MBEDTLS_DHM_C
+    bool "Diffie-Hellman-Merkle(DHM)"
+    default y
+    help
+        Enable the Diffie-Hellman-Merkle module.
+
 config MBEDTLS_ECDSA_C
     bool "Elliptic Curve DSA"
     depends on MBEDTLS_ECDH_C
diff --git a/components/ssl/mbedtls/port/esp8266/include/mbedtls/esp_config.h b/components/ssl/mbedtls/port/esp8266/include/mbedtls/esp_config.h
index acc36537..3afb6cc6 100644
--- a/components/ssl/mbedtls/port/esp8266/include/mbedtls/esp_config.h
+++ b/components/ssl/mbedtls/port/esp8266/include/mbedtls/esp_config.h
@@ -2024,7 +2024,9 @@
  *             See dhm.h for more details.
  *
  */
-//#define MBEDTLS_DHM_C
+#ifdef CONFIG_MBEDTLS_DHM_C
+#define MBEDTLS_DHM_C
+#endif
 
 /**
  * \def MBEDTLS_ECDH_C