这是indexloc提供的服务,不要输入任何密码
Skip to content
Discussion options

You must be logged in to vote

If the ClientHello contains signature_algorithms_cert but does not contain signature_algorithms, the TLS1.2 handshake fails.
The server reports an error: no shared signature algorithms.

signature_algorithms are optional in TLSv1.2. If they are not present then OpenSSL should fallback to "default" signature algorithms. This is specified in RFC5246:

   If the client does not send the signature_algorithms extension, the
   server MUST do the following:

   -  If the negotiated key exchange algorithm is one of (RSA, DHE_RSA,
      DH_RSA, RSA_PSK, ECDH_RSA, ECDHE_RSA), behave as if client had
      sent the value {sha1,rsa}.

   -  If the negotiated key exchange algorithm is one of (DHE_DSS…

Replies: 2 comments 2 replies

Comment options

You must be logged in to vote
0 replies
Comment options

You must be logged in to vote
2 replies
@lan1120
Comment options

@lan1120
Comment options

Answer selected by t8m
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
3 participants
Converted from issue

This discussion was converted from issue #22724 on November 14, 2023 13:42.