if err != nil {
		return err
	}
	serverFinished, ok := msg.(*finishedMsg)
	if !ok {
		c.sendAlert(alertUnexpectedMessage)
		return unexpectedMessageError(serverFinished, msg)
	}

	verify := hs.finishedHash.serverSum(hs.masterSecret)
	if len(verify) != len(serverFinished.verifyData) ||
		subtle.ConstantTimeCompare(verify, serverFinished.verifyData) != 1 {
		c.sendAlert(alertHandshakeFailure)

        "TrailingMessageData-CertificateRequest-TLS": "TODO: first pass, this should be fixed",
        "TrailingMessageData-CertificateVerify-TLS": "TODO: first pass, this should be fixed",
        "TrailingMessageData-ServerFinished-TLS": "TODO: first pass, this should be fixed",
        "TrailingMessageData-ClientKeyExchange-TLS": "TODO: first pass, this should be fixed",

			return err
		}
		if err := hs.establishKeys(); err != nil {
			return err
		}
		if err := hs.sendSessionTicket(); err != nil {
			return err
		}
		if err := hs.sendFinished(c.serverFinished[:]); err != nil {
			return err
		}
		if _, err := c.flush(); err != nil {
			return err
		}
		c.clientFinishedIsFirst = false
		if err := hs.readFinished(nil); err != nil {
			return err
		}
	} else {