TCP/IP Tutorial and Technical Overview - IBM Redbooks

CipherSpec message after processing the key exchange message. After that,
the newly agreed keys will be used until the next change CipherSpec request.
The change CipherSpec message is sent after the hello messages during the
negotiation.
SSL handshake protocol
The SSL handshake protocol allows the client and server to determine the
required parameters for an SSL connection such as protocol version,
cryptographic algorithms, optional client or server authentication, and public key
encryption methods to generate shared secrets. During this process, all
handshake messages are forwarded to the SSL record layer to be encapsulated
into special SSL messages. Figure 22-50 illustrates an SSL handshake process.
Client
Client Hello
(Certificate)
(Client Key Exchange)
(Certificate Verify)
Finished
Change Cipher Specs
Figure 22-50 SSL: Handshake process
We explain the SSL handshake process detailed in Figure 22-50 in more detail:
1. The client sends a connection request with a client hello message. This
message includes:
– Desired version number.
858 TCP/IP Tutorial and Technical Overview
1
2
3
4
Server
Server Hello
(Certificate)
(Server Key Exchange)
(Certificate Request)
Server Hello Done
Finished
Change Cipher Specs
5
Send Data Send Data