add --enable-sha and build, disables examples for now since certs still use sha, when add --disable-certs add more thorough check