RE: Client Key Exchange Message

2014-09-03 Thread Michael Wojcik
Reading the OpenSSL source code in an effort to learn how the SSL and TLS protocols work is not a good idea. OpenSSL is an implementation, not a tutorial. I suggest you get an actual description of how SSL/TLS works, such as Eric Rescorla's book SSL and TLS. (I believe Rich already suggested yo

RE: Client Key Exchange Message

2014-08-31 Thread Salz, Rich
There is no tutorial or walk-through of the OpenSSL code. You should start my reading the TLS RFC and make sure you really understand it; then you can figure out what the code is sending. -- Principal Security Engineer Akamai Technologies, Cambridge MA IM: rs...@jabber.me