[Bug]: wc_InitCert_ex uses a deprecated default algorithm (SHA1)

[DrKatieL]

Contact Details

No response

Version

latest master

Description

wc_InitCert_ex defaults to SHA1 RSA if SHA1 is supported by the wolfSSL build (see asn.c line 29011). Defaulting to a legacy algorithm is much more dangerous than supporting a legacy algorithm. The default should be a setting that is still currently recommend by NIST etc unless no such settings are compiled in.

Reproduction steps

read asn.c line 29011.

Relevant log output

[SparkiDev]

Hi @DrKatieL,

I've put up a pull request to fix this.
Let me know if this PR is good for you: #10173

Thanks,
Sean