From 16cfc2c90d9e7776965db07c1f31bbec2f6c41e3 Mon Sep 17 00:00:00 2001 From: Kurt Roeckx Date: Thu, 8 Mar 2018 22:30:28 +0100 Subject: Don't use a ssl specific DRBG anymore Since the public and private DRBG are per thread we don't need one per ssl object anymore. It could also try to get entropy from a DRBG that's really from an other thread because the SSL object moved to an other thread. Reviewed-by: Tim Hudson Reviewed-by: Paul Dale Reviewed-by: Matthias St. Pierre (Merged from https://github.com/openssl/openssl/pull/5547) --- ssl/t1_enc.c | 1 - 1 file changed, 1 deletion(-) (limited to 'ssl/t1_enc.c') diff --git a/ssl/t1_enc.c b/ssl/t1_enc.c index a138b60633..58d5e25361 100644 --- a/ssl/t1_enc.c +++ b/ssl/t1_enc.c @@ -171,7 +171,6 @@ int tls1_change_cipher_state(SSL *s, int which) ERR_R_MALLOC_FAILURE); goto err; } - EVP_CIPHER_CTX_ctrl(s->enc_write_ctx, EVP_CTRL_SET_DRBG, 0, s->drbg); dd = s->enc_write_ctx; if (SSL_IS_DTLS(s)) { mac_ctx = EVP_MD_CTX_new(); -- cgit v1.2.3