Re: using TLS (>1.2) with more than one certificate

2022-05-25 Thread Dirk-Willem van Gulik
On 25 May 2022, at 09:16, wrote: > I’ve a server application and need to support RSA and ECC clients at the same > time. > I don’t know which certificate from my local keystore I have to send to the > client, btw I have a rsa and a ecc certificate in my keystore already. > I don’t know with w

Re: using TLS (>1.2) with more than one certificate

2022-05-25 Thread Dmitry Belyavsky
Dear Tobias, Does code in s_server application help? On Wed, May 25, 2022 at 9:17 AM wrote: > I’ve a server application and need to support RSA and ECC clients at the > same time. > > I don’t know which certificate from my local keystore I have to send to > the client, btw I have a rsa and a ec

Re: using TLS (>1.2) with more than one certificate

2022-05-24 Thread Viktor Dukhovni
On Tue, May 24, 2022 at 04:10:00PM +0100, Angus Robertson - Magenta Systems Ltd wrote: > I do see a lot of SSL connection errors in my logs, but assume these > are mostly hackers or trackers with software not able to support > TLS/1.2, usually with a blank SNI and ALPN and often no extensions in

RE: using TLS (>1.2) with more than one certificate

2022-05-24 Thread Angus Robertson - Magenta Systems Ltd
>> I_ve a server application and need to support RSA and ECC >> clients at the same time. > > Configure the server's SSL_CTX with both certificate chains and > the private keys for the two entity certificates, and for older > TLS versions the server will select the appropriate chain based > on

RE: using TLS (>1.2) with more than one certificate

2022-05-24 Thread Michael Wojcik via openssl-users
> From: openssl-users On Behalf Of Matt > Caswell > Sent: Tuesday, 24 May, 2022 07:43 > To: openssl-users@openssl.org > Subject: Re: using TLS (>1.2) with more than one certificate > > On 24/05/2022 13:52, tobias.w...@t-systems.com wrote: > > I’ve a server applicati

Re: using TLS (>1.2) with more than one certificate

2022-05-24 Thread Matt Caswell
On 24/05/2022 13:52, tobias.w...@t-systems.com wrote: I’ve a server application and need to support RSA and ECC clients at the same time. I don’t know which certificate from my local keystore I have to send to the client, btw I have a rsa and a ecc certificate in my keystore already. I don’t