Self-signed SSL certificate with only TLS_RSA_WITH_AES_256_CBC_SHA cipher suite

Question

For debug purposes I need to create a SSL certificate which will support only TLS_RSA_WITH_AES_256_CBC_SHA cipher suite . I'm not so good in this area, so what's why I nned help.

How to create "standard" certificate I'm know, but it's also allow for client use alternative cipher suites .

Thanks in advance .

Answer 1

I need create SSL certificate which will support only TLS_RSA_WITH_AES_256_CBC_SHA cipher suite .

The only restrictions you can do in the certificate is if RSA or ECDSA is used for authentication because this depends on the kind of public key in the certificate. Everything else is only determined by the configuration of server and client and not by the certificate.