• caglararli@hotmail.com
  • 05386281520

(nginx) ssl_certificate_key in Handshake of TLS 1.2 and 1.3

Çağlar Arlı      -    2 Views

(nginx) ssl_certificate_key in Handshake of TLS 1.2 and 1.3

I am confused about the TLS handshake process in TLS 1.2 and TLS 1.3.

When configuring Nginx with SSL enabled, does the ssl_certificate_key play a role in the TLS handshake itself, or is it only used for server identity verification?

I have read that TLS 1.3 uses ephemeral key share for agreement of master secret, where the key is randomly generated for each session. Meanwhile, in TLS 1.2, the pre-shared secret is derived from both the client's and server's public keys. Could you clarify how the ssl_certificate_key is used in each version of TLS?

Thank you!