What will be the behaviour if chosen cipher suite is ECDSA but the chosen client certificate is RSA

StackOverflow https://stackoverflow.com/questions/19853372

  •  29-07-2022
  •  | 
  •  

Question

In case of TLS1.1 and TLS 1.0, what will be the behavior in the following scenario ?

Suppose the server and client both are capable of handling RSA and ECDSA, the client sends a list of cipher suites and server chooses ECDSA for authentication. Then the server requests for client certificate. The client has both RSA and ECDSA certificates for client authentication. If the client chooses an RSA certificate now. What will happen in this case.

Was it helpful?

Solution

The client has to supply a certificate that matches the server-specified certificate type and accepted issuers. "The certificate type must be appropriate for the selected cipher suite's key exchange algorithm". RFC 2246.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top