\def MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK If set, this enables the X.509 API `mbedtls_x509_crt_verify_with_ca_cb()` and the SSL API `mbedtls_ssl_conf_ca_cb()` which allow users to configure the set of trusted certificates through a callback instead of a linked list. This is useful for example in environments where a large number of trusted certificates is present and storing them in a linked list isn't efficient enough, or when the set of trusted certificates changes frequently. See the documentation of `mbedtls_x509_crt_verify_with_ca_cb()` and `mbedtls_ssl_conf_ca_cb()` for more information. Requires: MBEDTLS_X509_CRT_PARSE_C Uncomment to enable trusted certificate callbacks. \def MBEDTLS_X509_REMOVE_INFO Disable mbedtls_x509_*_info() and related APIs. Uncomment to omit mbedtls_x509_*_info(), as well as mbedtls_debug_print_crt() and other functions/constants only used by these functions, thus reducing the code footprint by several KB. \def MBEDTLS_X509_RSASSA_PSS_SUPPORT Enable parsing and verification of X.509 certificates, CRLs and CSRS signed with RSASSA-PSS (aka PKCS#1 v2.1). Requires: MBEDTLS_PKCS1_V21 Comment this macro to disallow using RSASSA-PSS in certificates.