Thanks Jimmy, now i properly understood!

Thanks and Regards,
Suchindra Chandrahas






jimmy bahuleyan <[EMAIL PROTECTED]> wrote: Suchindra Chandrahas wrote:
> Hi All,
>                Just went through this in openssl source in s3_enc.c:
> 
> static int ssl3_handshake_mac(SSL *s, EVP_MD_CTX *in_ctx,
>              const char *sender, int len, unsigned char *p)
>         {

[snip]..

> 
> This seems to be the function for generating the final md5 and sha
> hashes for client_finished messages. However, i am not able to find the
> handshake messages in the above EVP_DigestUpdates. But in RFC, the
> handshake messages are needed it says. Am i missing something here, or
> is this fine for an MD5 or SHA hash to be sent in client_finished
> message? Please let me know if i am wrong!!!
> 
> Thanks and Regards,
> Suchindra Chandrahas

The partial hashes of handshake messages are accumulated during the
handshake. You may want to take a look at ssl3_finish_mac() and where it
is called.

-jb
-- 
Don't have a sig to call my own; care to donate a fortune?
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]


       
---------------------------------
Looking for last minute shopping deals?  Find them fast with Yahoo! Search.

Reply via email to