From 8f21260b09eca6226255763e1856c12fbc71985c Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Wed, 15 Jan 2020 18:12:59 +0000 Subject: Make sure we use RAND_bytes_ex and RAND_priv_bytes_ex in libssl Now that libssl knows about libctx we should use it wherever we generate a random number. Reviewed-by: Shane Lontis Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/10927) --- ssl/ssl_sess.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ssl/ssl_sess.c') diff --git a/ssl/ssl_sess.c b/ssl/ssl_sess.c index 8d18ce4504..941660d8a1 100644 --- a/ssl/ssl_sess.c +++ b/ssl/ssl_sess.c @@ -259,7 +259,7 @@ static int def_generate_session_id(SSL *ssl, unsigned char *id, { unsigned int retry = 0; do - if (RAND_bytes(id, *id_len) <= 0) + if (RAND_bytes_ex(ssl->ctx->libctx, id, *id_len) <= 0) return 0; while (SSL_has_matching_session_id(ssl, id, *id_len) && (++retry < MAX_SESS_ID_ATTEMPTS)) ; -- cgit v1.2.3