As I've understood from RFC, record header shouldn't be repeated in one
handshake record.

For example, the Server Hello handshake record should only be having one
record header. This handshake record contains 4 handshake messages that are:
1. server_hello
2. certificate
3. certificate request (opt.)
4. server_hello_done

So, the packet byte dump looks like:

16 03 00 XX XX 02(server_hello) .. .. .. 0B(certificate) .. .. ..
0E(server_hello_done)

without the record header (16 03 00 XX XX) repeated.

I did a packet capture on the SSL demo programs that came with openssl
(<openssl-0.9.6>\demos\ssl\cli.cpp and serv.cpp) and found that the record
header is repeated for each of the handshake messages of the same handshake
record:

The Server Hello handshake record:

16 03 00 XX XX 02(server_hello) .. .. .. 16 03 00 XX XX 0B(certificate) ..
.. .. 16 03 00 XX XX 0E(server_hello_done)

Why is this so?


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to