Unexpected behaviors in TLS handshake

[Devang Kubavat <devang.kubavat@xxxxxxxxxx>]

Hi all,

I set the signature algorithm using in client,

/* signature algorithm list */

(void)SSL_CTX_set1_client_sigalgs_list(ctx, “RSA+SHA512”);

 

Expected behavior: client only accepts server certificate which has signature algorithm SHA512withRSAencryption during TLS handshake.

 

But, here even I set “RSA+SHA512” signature algorithm, still client is accepting the server certificate which has signature algorithm SHA256withRSAencryption. Why?

Best Regards,
Devang

 

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users