server_handshake_traffic_secret is generated as Section 7.1 of the RFC. This is later used in generating verify data of Finished message.
See page 72 of RFC which state
The key used to compute the Finished message is computed from the
Base Key defined in Section 4.4 using HKDF (see Section 7.1).