Bug: wh_server_cert is incompatible with WOLFSSL_NO_MALLOC but doesn't have the appropriate guards

[DrKatieL]

wh_Server_CertVerify calls wolfSSL_CertManagerNew() instead of wolfSSL_CertManagerNew_Ex() which supports a heap hint for WOLFSSL_NO_MALLOC. Either wh_Server_CertVerify should support heap hints, wh_server_cert.c should include a check for WOLFSSL_NO_MALLOC in it's guards, or another compile time check should throw an error that WOLFSSL_NO_MALLOC and WOLFHSM_CFG_CERTIFICATE_MANAGER are mutually exclusive.

[bigbrett]

Thanks for this report. I think the best solution here would be to add a heap hint to the API just like you suggested. We also will be adding a user callback to configure the cert manager object in case the user wants to do anything fancy, so we will ensure both items get addressed at once.