From 5b08bc04b298dc284e8ac955b062fb78a797ef67 Mon Sep 17 00:00:00 2001
From: JacobBarthelmeh <jacob@wolfssl.com>
Date: Tue, 26 May 2026 17:58:23 -0600
Subject: [PATCH] set MD5 min hash size when using --enable-wolfclu

---
 configure.ac | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/configure.ac b/configure.ac
index 24ab654b4e..7cd5cf6671 100644
--- a/configure.ac
+++ b/configure.ac
@@ -11369,6 +11369,13 @@ then
 
     AM_CFLAGS="$AM_CFLAGS -DHAVE_OID_ENCODING -DWOLFSSL_NO_ASN_STRICT"
 
+    # wolfCLU allows MD5 with wc_Signature*; lower the hash strength floor
+    # when MD5 is compiled in.
+    if test "$ENABLED_MD5" = "yes"
+    then
+        AM_CFLAGS="$AM_CFLAGS -DWC_SIG_MIN_HASH_TYPE=WC_HASH_TYPE_MD5"
+    fi
+
     # OCSP responder
     if test "$ENABLED_OCSP" = "no"; then
         ENABLED_OCSP="yes"