diff --git a/ChangeLog.d/fix-x509-check-features.txt b/ChangeLog.d/fix-x509-check-features.txt
new file mode 100644
index 0000000000..be567888e6
--- /dev/null
+++ b/ChangeLog.d/fix-x509-check-features.txt
@@ -0,0 +1,3 @@
+Bugfix
+   * Fix a `mbedtls_version_check_features()` regression which caused all
+     features under the X.509 configuration section to be considered disabled.
diff --git a/scripts/generate_features.pl b/scripts/generate_features.pl
index 5e50ca6a4e..7c6d80cb47 100755
--- a/scripts/generate_features.pl
+++ b/scripts/generate_features.pl
@@ -65,7 +65,7 @@ while (my $line = <CONFIG_H>)
     }
 
     if (!$in_section) {
-        my ($section_name) = $line =~ /SECTION: ([\w ]+)/;
+        my ($section_name) = $line =~ /SECTION: ([\w .]+)/;
         my $found_section = grep $_ eq $section_name, @sections;
 
         $in_section = 1 if ($found_section);