Authentication and failure
06Certificate checks, proof of key possession, and transcript authentication answer different questions.
This guide explains the 2018 publication. Superseded by RFC 9846.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 4.4 ↗
RFC 8446 · § 4.4EXAMPLE
4 / 4
04
Stop on failed verification.
A failed CertificateVerify produces decrypt_error; do not proceed as authenticated.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
A valid chain does not replace the rest of authentication.
- CertificateVerify signs a context-bound transcript hash.
- Finished verifies the handshake transcript using a derived key.
- Fatal errors close the connection; close_notify signals an orderly end of one sending direction.
The examples simplify the wire representation. Follow the linked specification and application profile for implementation.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy