Hi, All!

I've got two questions about SSL2.0 client certificates.
When creating the CLIENT CERTIFICATE message, we need
to calculate a MD5 digest, like this (cite from SSL2 spec.):

-----
the KEY-MATERIAL-0 
the KEY-MATERIAL-1 (only if defined by the cipher kind) 
the KEY-MATERIAL-2 (only if defined by the cipher kind) 
the CERTIFICATE-CHALLENGE-DATA (from the REQUEST-CERTIFICATE message) 
the server's signed certificate (from the SERVER-HELLO message) 
-----

Please, tell me, what means "the server's signed certificate (from the SERVER-HELLO 
message)"? Is it the full certificate we got from server-hello message?

And the second question: am I right, when using Client-Read-Key + Client-Write-Key 
instead of Key-material-0, Key-material-1, Key-material-2? (+ means concatenation).

Thank You very much,
Innokentiy.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to