I have an old application that needs the obsolete RSA key and not the ECDH. I know the ECDH is newer. I have tried this
openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -out private-key.pem
I create my csr
I import the csr in CA to create cer and the chain. After doing all this I still get the new version of the ssl cert.
The connection to this site is encrypted and authenticated using TLS 1.2, ECDHE_RSA with P-256, and AES_128_GCM
I want this:
The connection to this site is encrypted and authenticated using TLS1.2, RSA, and AES_256_CBC with HMAC-SHA1
The application servers are Windows.