Re: SSL ciphers

[Pete Helgren <pete@xxxxxxxxxx>]

"The certificate and the cipher have nothing to do with one another. "

Hmmm.  News to me then.  My understanding was that we needed to request 
a new Certificate from Comodo.  Current certificate shows that it 
supports Signature algorithm SHA1RSA with a Signature hash algorithm of 
SHA1.  Which is why Chrome flags our website with the red slash on our 
SSL connection.  My understanding was that that the SHA1 cert would only 
negotiate a SHA1 cipher request (so the cipher and cert WERE related) so 
I guess I need to do more reading.....

Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
 

On 4/22/2015 12:20 PM, Tim Bronski wrote:
> The certificate and the cipher have nothing to do with one another.
>
> On 4/22/2015 7:12 PM, Steinmetz, Paul wrote:
> > Could/would the iSeries WC cert affect the cipher negotiation?
> > I still have a SHA 1 WC cert, the new SHA 256 WC cert not yet enabled.
> >
> > Pa