Re: Keys and Certificates creations

"Miller, Timothy J." <[email protected]> Mon, 11 Feb 2013 13:15:58 +0000
Newsgroups gmane.comp.encryption.cryptlib
Message-ID <[email protected]>
On 2/9/13 8:34 PM, "Peter Gutmann" <[email protected]> wrote:

>DSA is a signature-only algorithm, you can't encrypt an SSL session key
>(well,
>strictly speaking the SSL premaster secret) with it.

Any of the DH/DHE DSS cipher suites should work, but you have to set the
keyAgreement keyUsage in the server cert.

-- T


_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.