Introduce configuration option to remove CRT verification callbacks
diff --git a/library/x509.c b/library/x509.c
index 19cc64b..0eca059 100644
--- a/library/x509.c
+++ b/library/x509.c
@@ -1250,11 +1250,20 @@
if( verbose != 0 )
mbedtls_printf( "passed\n X.509 signature verify: ");
+#if !defined(MBEDTLS_X509_REMOVE_VERIFY_CALLBACK)
ret = mbedtls_x509_crt_verify( &clicert, &cacert, NULL,
#if !defined(MBEDTLS_X509_REMOVE_HOSTNAME_VERIFICATION)
NULL,
#endif /* !MBEDTLS_X509_REMOVE_HOSTNAME_VERIFICATION */
&flags, NULL, NULL );
+#else
+ ret = mbedtls_x509_crt_verify( &clicert, &cacert, NULL,
+#if !defined(MBEDTLS_X509_REMOVE_HOSTNAME_VERIFICATION)
+ NULL,
+#endif /* !MBEDTLS_X509_REMOVE_HOSTNAME_VERIFICATION */
+ &flags );
+#endif
+
if( ret != 0 )
{
if( verbose != 0 )