Use EVP_md5_sha1() to generate client verify