I am facing an issue with TLS handshake. I am using the following ciphersuit with client authentication. MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
What I am trying to do is use a smart card to sign the payloads of previous messages. So I store the private key in the smartcard in order to sign.
Now when I dont use the smartcard, the TLS handshake is working. So to start the discussion I have the following query:
Q. What is the role of client's private key in TLS handshake under client authentication scenario? Is it only used to sign or anything else as well?
Thanks for your help.