Welcome! Log In Create A New Profile

Advanced

Re: "A" Grade SSL/TLS with Nginx and StartSSL

Rob Stradling
October 17, 2013 10:06AM
On 15/10/13 23:00, Piotr Sikora wrote:
<snip>
>> Because someone else might use DSA certificates.
>
> It's ECDSA, not DSA... And I'm yet to see a site that offers ECDSA
> instead of RSA certificate.

There are some sites that offer an ECDSA cert where possible, but
fallback to an RSA cert when the client doesn't offer any ECDSA ciphers.
AFAIK, Apache httpd is the only major webserver that can currently be
configured this way.
I expect to see this configuration become more common in the (near?)
future, given that some commercial CAs are now actively selling ECDSA certs.

Nginx currently only allows one cert to be configured, and I too am yet
to see a site that offers _only_ an ECDSA cert. I expect this is due to
the large proportion (I estimate ~20%) of clients that support RSA certs
but not ECDSA certs.

I'd love to see the ECDSA cert + RSA cert feature implemented in Nginx
too. OpenSSL does most of the hard work already. I've written a PoC
patch, but I'll post it to a different thread.

--
Rob Stradling
Senior Research & Development Scientist
COMODO - Creating Trust Online

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

"A" Grade SSL/TLS with Nginx and StartSSL

Julien Vehent October 12, 2013 05:56PM

Re: "A" Grade SSL/TLS with Nginx and StartSSL

Piotr Sikora October 15, 2013 12:40AM

Re: "A" Grade SSL/TLS with Nginx and StartSSL

Julien Vehent October 15, 2013 09:28AM

Re: "A" Grade SSL/TLS with Nginx and StartSSL

Piotr Sikora October 15, 2013 06:02PM

Re: "A" Grade SSL/TLS with Nginx and StartSSL

Rob Stradling October 17, 2013 10:06AM

Re: "A" Grade SSL/TLS with Nginx and StartSSL

W-Mark Kubacki October 20, 2013 05:14PM

Re: "A" Grade SSL/TLS with Nginx and StartSSL

eiji-gravion October 16, 2013 10:22PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 60
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready