TLS1_FLAGS_ENCRYPT_THEN_MAC_READ
#define TLS1_FLAGS_ENCRYPT_THEN_MAC TLS1_FLAGS_ENCRYPT_THEN_MAC_READ
#define SSL_READ_ETM(s) (s->s3.flags & TLS1_FLAGS_ENCRYPT_THEN_MAC_READ)
s->s3.flags |= TLS1_FLAGS_ENCRYPT_THEN_MAC_READ;
s->s3.flags &= ~TLS1_FLAGS_ENCRYPT_THEN_MAC_READ;