The change 775a4bea43 "libsec: various changes to tls" ... 4. simply prf code... ... broke the TLS1.0 prf function, missing the fact that the prf ouput for sha1 and md5 need to be xored together.
775a4bea43