[pfx] Re: Especially with DANE use default TLS settings

Sad Clouds via Postfix-users <[email protected]>
Newsgroups gmane.mail.postfix.user
Message-ID <[email protected]> 
On Mon, 20 Apr 2026 03:44:45 +1000
Viktor Dukhovni via Postfix-users <[email protected]> wrote:

> It is not possible.  OpenSSL supports at most one EC cert + private key
> at a time in a given context (default or SNI-based).

OK thanks for the info, I've been wondering about this for the past
few weeks. I recently started testing with dual certificates: ECDSA with
P-256 and RSA with 2048. I will stick with these for now as it seems to
align with your recommendations.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.