Robert Withers wrote:
Is there any sample input and output so I can check that my PRF is
functioning correctly? I am getting MAC errors both as the client
and as the server, so I suspect the encryption is hokey, and that
points to a key_block problem.
I once had a similar problem, and this is what I did: I downloaded
OpenSSL source code, and added some debugging printf's to ssl/s3_enc.c
(ssl3_generate_master_secret and ssl3_generate_key_block functions),
and then tested my implementation against the openssl s_client/
s_server
command line tools.
Best regards,
Pasi