Sena HelloDevice Pro PS110 Series User Manual page 59

be encrypted with the session key. It then sends a separate (encrypted) message indicating
that the server portion of the handshake is finished.
10. The SSL handshake is now complete, and the SSL session has begun. The client and the
server use the session keys to encrypt and decrypt the data they send to each other and to
validate its integrity.
Plain
Text
Cipher
Text
The Pro Series can act as a SSL server or as a SSL client depending on status of TCP mode. If TCP
connection with SSL is initiated from remote host first, Pro Series acts as a SSL server during the SSL
handshake process. On the contrary, if TCP connection with SSL is initiated from serial port of Pro
Series first, Pro Series acts as a SSL client during the SSL handshake process.
  Client Authentication by certificate (server mode only)
If user selects Client Authentication by certificate option as "Enable" , Pro Series will request the client' s
certificate while in SSL handshaking process (Step 2). On the contrary, if user selects Client
Authentication by certificate option as "Disable" , Pro Series does not request the client' s certificate
while in SSL handshaking process (Step 2).
Client
Client Hello
Certificate
ClientKeyExchange
CertificateVerify
ChangeCiperSpec
Application Data
Figure 4-11 Typical SSL Handshake Process
ServerKeyExchange
CertificateRequest
ServerHelloDone
ChangeCiperSpec
Handshake
Finished
Application Data
59
Server
Server Hello
Certificate