I am now using this ciphersuite:


I am using OpenSSL 1.0.1m, with Apache 2.2 on my Synology NAS. My problem is, that ECDHE-ECDSA ciphers are not in use. (tested on ssllabs: https://www.ssllabs.com/ssltest/analyze.html?d=sufix.cz&s=

Why does this happen? Is it just beacuse of syntax error or too old versions?

1 Answer 1


Do you have an ECDSA certificate?

  • No, just RSA now.
    – Matyáš Koc
    Commented Jun 19, 2015 at 16:45
  • 3
    That might be the problem
    – Jacques
    Commented Jun 19, 2015 at 16:45
  • Is it required?
    – Matyáš Koc
    Commented Jun 19, 2015 at 16:46
  • 4
    @Mat Yes. The signature algorithm in the cipher suite uses the key in your cert, so ECDSA requires a cert with an ECDSA key.
    – cpast
    Commented Jun 19, 2015 at 16:51

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .