[TLS] Regarding the length of encrypted premaster secret.

[nilesh <[e-mail]>]

Hi,

I have setup an apache server with TLS/SSL support. And I could capture 
some https packets.
Also I have written a dummy code to decrypt using AES algorithm.

However, in the current trace file, the size of encrypted premaster sent 
from client is 130bytes.
I tried first getting a premaster from the encrypted premaster and it 
failed (my program is correct as
I verified it on different trace, also the server private key is correct 
as wireshark could decrypt using this key).
If I remove initial 2bytes of encrypted premaster secret (make it 
128bytes) - then I am able to decrypt it without failure.
But the master_secret and key block generated are not correct then (the 
application data get decrypted to junk -
again, I verified my code to generate master_secret and key block with 
different trace).

<snip>
rsa = RSA_new();
fp = fopen("server.key", "rb"); // error handling is done.
PEM_read_RSAPrivateKey(fp, &rsa, NULL, NULL);
RSA_check_key(rsa);
// Below API fails with '-1' rc - when 130bytes encrypted_premaster is used.
RSA_private_decrypt(pre_master_len, encrypted_premaster, pre_master, 
rsa, RSA_PKCS1_PADDING);
</snip>

Could someone please advise if I missed anything? Should the encrypted 
premaster be always 128bytes?
I have attached the trace file and key file with the email.

-- 
Thanks,
Nilesh