I've the following scenario:

  • Root-CA: key algorithm is RSA-2048 and it's self-signed (Sha256WithRSA)
  • Server-Cert: key algorithm is ECDSA, based on secp384r1 and it's signed by Root-CA with Sha256WithRSA

Is it possible to use such a scenario within TLS-Communication or is it necessary to use the same key and signature algorithms every time?

I've set up a Tomcat Webserver with the mentioned server certificate but it doesn't work! It seems that the browser (Chrome) and the webserver (Tomcat 8) can't agree for a cipher suite. The error is "ERR_SSL_VERSION_OR_CIPHER_MISMATCH".

Any ideas or recommendations?

marked as duplicate by StackzOfZtuff, Xander, Steffen Ullrich tls Jan 11 '17 at 17:58

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

Browse other questions tagged or ask your own question.