<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">

<html lang="en">

<head>

<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">

<title>

GitLab

</title>

<style>img {

max-width: 100%; height: auto;

}

</style>

</head>

<body>

<div class="content">

<p style="color: #777777;">

<a href="https://gitlab.com/stbuehler">Stefan Bühler</a>

commented:

</p>

<div style="">

<p dir="auto">Wtf. I "just" (13:25 UTC :) ) noticed the zeroed random when watching openconnect, and though about opening a private issue - seems security relevant.</p>

<p dir="auto">Attached patch should fix the zero random, and also prevent creating a new random on retry.</p>

<p dir="auto"><a href="https://gitlab.com/gnutls/gnutls/uploads/0eb6f33a4592089b75b7f91a7800d359/0001-dtls-client-hello-fix-zeroed-random.patch" class="gfm">0001-dtls-client-hello-fix-zeroed-random.patch</a></p>

</div>

</div>

<div class="footer" style="margin-top: 10px;">

<p style="font-size: small; color: #777;">

—

<br>

Reply to this email directly or <a href="https://gitlab.com/gnutls/gnutls/-/issues/960#note_312917741">view it on GitLab</a>.

<br>

You're receiving this email because of your account on gitlab.com.

If you'd like to receive fewer emails, you can

<a href="https://gitlab.com/sent_notifications/dacb6237bf20954957403d82e1bb8304/unsubscribe">unsubscribe</a>

from this thread or

adjust your notification settings.

<script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","action":{"@type":"ViewAction","name":"View Issue","url":"https://gitlab.com/gnutls/gnutls/-/issues/960#note_312917741"}}</script>

</p>

</div>

</body>

</html>