From d4c0df0df9f2524f84b0f0880b9ba28e5bbd8365 Mon Sep 17 00:00:00 2001
From: Craig Raw <craigraw@gmail.com>
Date: Sat, 28 Feb 2026 12:51:50 +0200
Subject: [PATCH] detect algorithm on provided certificate when checking for ca
 cert

---
 .../com/sparrowwallet/sparrow/net/TcpOverTlsTransport.java     | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/main/java/com/sparrowwallet/sparrow/net/TcpOverTlsTransport.java b/src/main/java/com/sparrowwallet/sparrow/net/TcpOverTlsTransport.java
index 791626df..01fef26b 100644
--- a/src/main/java/com/sparrowwallet/sparrow/net/TcpOverTlsTransport.java
+++ b/src/main/java/com/sparrowwallet/sparrow/net/TcpOverTlsTransport.java
@@ -193,7 +193,8 @@ public class TcpOverTlsTransport extends TcpTransport {
                 x509Certs[i] = (X509Certificate)certs[i];
             }
 
-            defaultTm.checkServerTrusted(x509Certs, "RSA");
+            String authType = x509Certs[0].getPublicKey().getAlgorithm().equals("EC") ? "ECDHE_ECDSA" : "RSA";
+            defaultTm.checkServerTrusted(x509Certs, authType);
             return true;
         } catch(Exception e) {
             return false;