Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to use Diffie-Hellman anonymous cipher for SSL. I also want to use a one-way certificate for server authentication. Is this possible?

share|improve this question
If you authenticate the server, it's by definition not anonymous. Why do you want to use a DH_anon suite? Why not ECDHE_RSA or something similar? – CodesInChaos Oct 23 '12 at 10:40

By definition, when using the DH_anon cipher suites in SSL/TLS, there is no server certificate -- not certificate at all, indeed, since in that situation the server is not allowed to request a certificate from the client either.

If you want to authenticate the server, then the server you have in mind must have something special which distinguishes it from just any other machine in the Internet. Since everybody can buy the same kind of hardware, that "something special" must be something that the server knows. With a certificate, what the server knows is a private key in an asymmetric key pair (RSA, DSA...). Without a certificate, you can authenticate the server with regards to a shared secret (that both server and client know); see RFC 4279 (when the shared secret is a high entropy secret key) or RFC 5054 (when the shared secret is a password).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.