But I am still confused about this: what does
Au=ECDH mean for a cipher such as
ECDH-ECDSA-AES256-SHA. From the cmd line:
ECDH-ECDSA-AES256-SHA SSLv3 Kx=ECDH/ECDSA Au=ECDH Enc=AES(256) Mac=SHA1
What I understand is that the server's certificate will have the DH public key (since this is fixed DH). The certificate will be signed by the CA. So what role do DSS (aka DSA) keys play here? Does the certificate have a DSS signature?
Secondly, since authentication is DSS, why say
EDIT: If you have suggestions for a good resource to read specifically about Authentication mechanisms in SSL, I would appreciate it.