As I've understood from RFC, record header shouldn't be repeated in one handshake record. For example, the Server Hello handshake record should only be having one record header. This handshake record contains 4 handshake messages that are: 1. server_hello 2. certificate 3. certificate request (opt.) 4. server_hello_done So, the packet byte dump looks like: 16 03 00 XX XX 02(server_hello) .. .. .. 0B(certificate) .. .. .. 0E(server_hello_done) without the record header (16 03 00 XX XX) repeated. I did a packet capture on the SSL demo programs that came with openssl (<openssl-0.9.6>\demos\ssl\cli.cpp and serv.cpp) and found that the record header is repeated for each of the handshake messages of the same handshake record: The Server Hello handshake record: 16 03 00 XX XX 02(server_hello) .. .. .. 16 03 00 XX XX 0B(certificate) .. .. .. 16 03 00 XX XX 0E(server_hello_done) Why is this so? ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]