Dear SSL Users,

I am looking at the debug output of the s_client command, trying to compare the
binary data with structures described in rfc 5246...  Everything is more or less
clear, but, I can not figure out where three bytes in front of each structure
come from...

Each data transmission (client -> server and server -> client) starts with:

16 03 01

(later we see 14, and 17 instead of 16), followed by the length, which is the 
part
of rfc 5246 structures...  But, can somebody tell me what is this "16"?  03 01
could be the version number, which is duplicated inside of structures, but why
are these bytes there, while I don't see any references to it in the rfc 5146?

Thanks in advance.

Archie

P.S.  Below is the output:

read from 009AA600 [009AFBB0] (7 bytes => 7 (0x7))
0000 - 16 03 01 00 4a 02                                 ....J.
0007 - <SPACES/NULS>
read from 009AA600 [009AFBB7] (72 bytes => 72 (0x48))

I am taling about 16 03 01 on the 0000 line.




______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to