I've read this post but I'm still unable to understand some things.
I'm trying to verify that the signature algorithm used in the certificate matches the proposed list from the client. (As it's mandatory in TLS 1.3)
But I cannot understand the difference in verification when the client offers both signature schemes 'rsa_pss_rsae_' and 'rsa_pss_pss_'.
Both of them indicate that the signing can be in PSS, but from my understanding, the 'rsa_pss_rsae_' is specifying constraints on the public key? Is that correct?
Does it mean that when verifying the certificate signature algorithm, both will be signed with the OID RSASSA-PSS BUT the difference will be in the public key?
(as in RSA (rsaEncryption) or PSS only (RSASSA-PSS) key)