Can someone explain the significance of Certificate Signature algorithm in the selection of Cipher suite in a TLS communication?

marked as duplicate by schroeder Aug 21 at 9:05

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • @schroeder I am trying to understand if the signature algorithm of a certificate has any role in the ciphersuite selection during the TLS communication. – Redhat Aug 21 at 8:40
  • Ah, that's much clearer, thank you. – schroeder Aug 21 at 9:05
  • In the past , CloudFlare did this: blog.cloudflare.com/sha-1-deprecation-no-browser-left-behind. Returning SHA-1 or SHA-2 signed certificate depending on how the client presented itself (in order to help old clients blocked at the SHA-1 case). So it is kind of the exact reverse: based on what crypto algorithms the client presented, the server offered a certificate signed differently. – Patrick Mevzek Aug 27 at 23:04