From 5e50ed0f13878f5ba7c1d18f210274a432ad6323 Mon Sep 17 00:00:00 2001
From: Timothy Legge <timlegge@gmail.com>
Date: Fri, 31 Oct 2025 22:48:53 -0300
Subject: [PATCH] Change the default hash mode to sha256

sha1 is problematic especially since RedHat disabled it's usage
---
 RSA.xs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/RSA.xs b/RSA.xs
index e3b3c27..7b18f81 100644
--- a/RSA.xs
+++ b/RSA.xs
@@ -114,7 +114,11 @@ SV* make_rsa_obj(SV* p_proto, EVP_PKEY* p_rsa)
 
     CHECK_NEW(rsa, 1, rsaData);
     rsa->rsa = p_rsa;
+#ifdef SHA512_DIGEST_LENGTH
+    rsa->hashMode = NID_sha256;
+#else
     rsa->hashMode = NID_sha1;
+#endif
     rsa->padding = RSA_PKCS1_OAEP_PADDING;
     return sv_bless(
         newRV_noinc(newSViv((IV) rsa)),