Thanks Jimmy, now i properly understood! Thanks and Regards, Suchindra Chandrahas
jimmy bahuleyan <[EMAIL PROTECTED]> wrote: Suchindra Chandrahas wrote: > Hi All, > Just went through this in openssl source in s3_enc.c: > > static int ssl3_handshake_mac(SSL *s, EVP_MD_CTX *in_ctx, > const char *sender, int len, unsigned char *p) > { [snip].. > > This seems to be the function for generating the final md5 and sha > hashes for client_finished messages. However, i am not able to find the > handshake messages in the above EVP_DigestUpdates. But in RFC, the > handshake messages are needed it says. Am i missing something here, or > is this fine for an MD5 or SHA hash to be sent in client_finished > message? Please let me know if i am wrong!!! > > Thanks and Regards, > Suchindra Chandrahas The partial hashes of handshake messages are accumulated during the handshake. You may want to take a look at ssl3_finish_mac() and where it is called. -jb -- Don't have a sig to call my own; care to donate a fortune? ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] --------------------------------- Looking for last minute shopping deals? Find them fast with Yahoo! Search.