From 16cfc2c90d9e7776965db07c1f31bbec2f6c41e3 Mon Sep 17 00:00:00 2001 From: Kurt Roeckx Date: Thu, 8 Mar 2018 22:30:28 +0100 Subject: Don't use a ssl specific DRBG anymore Since the public and private DRBG are per thread we don't need one per ssl object anymore. It could also try to get entropy from a DRBG that's really from an other thread because the SSL object moved to an other thread. Reviewed-by: Tim Hudson Reviewed-by: Paul Dale Reviewed-by: Matthias St. Pierre (Merged from https://github.com/openssl/openssl/pull/5547) --- ssl/s3_enc.c | 1 - 1 file changed, 1 deletion(-) (limited to 'ssl/s3_enc.c') diff --git a/ssl/s3_enc.c b/ssl/s3_enc.c index 966d498e61..d6a08de5a6 100644 --- a/ssl/s3_enc.c +++ b/ssl/s3_enc.c @@ -168,7 +168,6 @@ int ssl3_change_cipher_state(SSL *s, int which) */ EVP_CIPHER_CTX_reset(s->enc_write_ctx); } - EVP_CIPHER_CTX_ctrl(s->enc_write_ctx, EVP_CTRL_SET_DRBG, 0, s->drbg); dd = s->enc_write_ctx; if (ssl_replace_hash(&s->write_hash, m) == NULL) { SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_CHANGE_CIPHER_STATE, -- cgit v1.2.3