Dear SSL Users, I am looking at the debug output of the s_client command, trying to compare the binary data with structures described in rfc 5246... Everything is more or less clear, but, I can not figure out where three bytes in front of each structure come from...
Each data transmission (client -> server and server -> client) starts with: 16 03 01 (later we see 14, and 17 instead of 16), followed by the length, which is the part of rfc 5246 structures... But, can somebody tell me what is this "16"? 03 01 could be the version number, which is duplicated inside of structures, but why are these bytes there, while I don't see any references to it in the rfc 5146? Thanks in advance. Archie P.S. Below is the output: read from 009AA600 [009AFBB0] (7 bytes => 7 (0x7)) 0000 - 16 03 01 00 4a 02 ....J. 0007 - <SPACES/NULS> read from 009AA600 [009AFBB7] (72 bytes => 72 (0x48)) I am taling about 16 03 01 on the 0000 line. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org