Why is there an ECDH_RSA_XXX class cipher suite in OpenSSL?

recently, I am learning openssl,. Generally speaking, ECDH is a key exchange algorithm in the SSL handshake stage. In the course of learning, I learned that because its algorithm uses the private key in the CA certificate as a fixed parameter, it can only use the ECC certificate, and the corresponding signature algorithm should be the ECDSA algorithm. But why does the openssl official cipher suite have an ECDH_RSA cipher suite? Should this cipher suite use a RSA certificate or an ECC certificate?

openssl ciphers -V "ECDH" | grep "RSA" | column -t

https://pic2.zhimg.com/v2-243.

Jun.28,2021

if this naming is the same as RFC4492: ECDH_RSA means that the public key of the server certificate is the ECC, server certificate itself signed by RSA

Menu