I have two Windows 2008 R2 domain controllers configured with TLS 1.2. Both certificates are SHA1-RSA. I captured network traffic between two DCs while running LDAPS (LDP.EXE). It seems TLS 1.2 was agreed but the cipher it was used TLSCipherSuite: TLS_RSA_WITH_AES_128_CBC_SHA256 { 0x00, 0x3C }
So by looking at it, is it going to use SHA1 certificate to sign SHA256 hash? Will that work? Why it didn't pick up SHA1 cipher?