From 081567fda6f1060634de5b6a8e9f88891756344c Mon Sep 17 00:00:00 2001
From: hemanth-silabs <50145824+hemanth-silabs@users.noreply.github.com>
Date: Thu, 29 Sep 2022 18:38:25 -0400
Subject: [PATCH] [crypto] update the signature algorithm used for 3.2.0
 mbedTLS (#8215)

`mbedtls_ssl_conf_sig_hashes` was deprecated in 3.2.0, and we
attempted to move over to the new recommended function. That new
function expects `MBEDTLS_TLS1_3_SIG_` type arguments.
---
 src/core/meshcop/dtls.cpp | 4 ++--
 src/core/meshcop/dtls.hpp | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/core/meshcop/dtls.cpp b/src/core/meshcop/dtls.cpp
index 790c78e7d..b1482ed31 100644
--- a/src/core/meshcop/dtls.cpp
+++ b/src/core/meshcop/dtls.cpp
@@ -67,7 +67,7 @@ const mbedtls_ecp_group_id Dtls::sCurves[] = {MBEDTLS_ECP_DP_SECP256R1, MBEDTLS_
 
 #if defined(MBEDTLS_KEY_EXCHANGE__WITH_CERT__ENABLED) || defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED)
 #if (MBEDTLS_VERSION_NUMBER >= 0x03020000)
-const uint16_t Dtls::sHashes[] = {MBEDTLS_MD_SHA256, MBEDTLS_MD_NONE};
+const uint16_t Dtls::sSignatures[] = {MBEDTLS_TLS1_3_SIG_ECDSA_SECP256R1_SHA256, MBEDTLS_TLS1_3_SIG_NONE};
 #else
 const int Dtls::sHashes[] = {MBEDTLS_MD_SHA256, MBEDTLS_MD_NONE};
 #endif
@@ -306,7 +306,7 @@ Error Dtls::Setup(bool aClient)
 #endif
 #if defined(MBEDTLS_KEY_EXCHANGE__WITH_CERT__ENABLED) || defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED)
 #if (MBEDTLS_VERSION_NUMBER >= 0x03020000)
-        mbedtls_ssl_conf_sig_algs(&mConf, sHashes);
+        mbedtls_ssl_conf_sig_algs(&mConf, sSignatures);
 #else
         mbedtls_ssl_conf_sig_hashes(&mConf, sHashes);
 #endif
diff --git a/src/core/meshcop/dtls.hpp b/src/core/meshcop/dtls.hpp
index d249ed408..0ff6fe647 100644
--- a/src/core/meshcop/dtls.hpp
+++ b/src/core/meshcop/dtls.hpp
@@ -450,7 +450,7 @@ private:
 
 #if defined(MBEDTLS_KEY_EXCHANGE__WITH_CERT__ENABLED) || defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED)
 #if (MBEDTLS_VERSION_NUMBER >= 0x03020000)
-    static const uint16_t sHashes[];
+    static const uint16_t sSignatures[];
 #else
     static const int sHashes[];
 #endif