* Viktor Dukhovni via mailop <[email protected]>:
> On Wed, Dec 17, 2025 at 01:29:18PM +0100, Ralf Hildebrandt via mailop wrote:
> 
> > Once I present both, mimecast is failing.
> 
> Really not "present", rather "configure" or "offer".
> 
> When a client offers support for both, your server likely chooses ECDSA
> over RSA, 

So my server chooses? I always thought the client would choose?
Learn something new every day!

> Only one certificate is ever "presented", but both are available, the
> server chooses which to present among those supported by the client.

Ah! So the client says "I can handle both" and my evil server sends
the ECC certificate, which annoys the client.

Will wrap my head around the config stuff...
-- 
Ralf Hildebrandt
Charité - Universitätsmedizin Berlin
Geschäftsbereich IT | Abteilung Netz | Netzwerk-Administration
Invalidenstraße 120/121 | D-10115 Berlin

Tel. +49 30 450 570 155
[email protected]
https://www.charite.de
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to