TLS1_FLAGS_ENCRYPT_THEN_MAC_WRITE
#define SSL_WRITE_ETM(s) (s->s3.flags & TLS1_FLAGS_ENCRYPT_THEN_MAC_WRITE)
s->s3.flags |= TLS1_FLAGS_ENCRYPT_THEN_MAC_WRITE;
s->s3.flags &= ~TLS1_FLAGS_ENCRYPT_THEN_MAC_WRITE;