Clarification of RFC2246 with regards to Finished Message I'm working on a client handshake finished message for a TLS client, and I'm reading through the RFC 2246 spec. The spec states (in section 7.4.9):


  The hash contained in finished messages sent by the server
  incorporate Sender.server; those sent by the client incorporate
  Sender.client. The value handshake_messages includes all handshake
  messages starting at client hello up to, but not including, this
  finished message. This may be different from handshake_messages in
  Section 7.4.8 because it would include the certificate verify message
  (if sent). Also, the handshake_messages for the finished message sent
  by the client will be different from that for the finished message
  sent by the server, because the one which is sent second will include
  the prior one.


Is anyone able to clear up what it means in the first sentence with regards to the Sender.server and Sender.client?
This is an error in RFC 2246 corrected at https://www.rfc-editor.org/errata_search.php?rfc=2246 and in the subsequent version TLS RFCs 4346 and 5246. 
It derives from SSLv3 on which TLSv1.0 was mostly based, now available as RFC 6101 if you want to compare them. You'll see SSLv3 had 

enum { client(0x434C4E54), server(0x53525652) } Sender;


(which are the ASCII strings "CLNT" and "SRVR" respectively) and specified that Sender is included in the hash calculation which in SSLv3 was a concatenation of doubled MD5 and SHA1 keyed hashes. TLSv1.0 changed this to finished_label with the values "client finished" and "server finished", included in the PRF defined elsewhere in the document as the XOR of doubled MD5 and SHA1 HMACs, where each HMAC is itself a doubled keyed hash.