Implement referred Token Bindings

third_party/tlslite/tlslite/tlsconnection.py

 # Authors: 
 #   Trevor Perrin
 #   Google - added reqCAs parameter
 #   Google (adapted by Sam Rushing and Marcelo Fernandez) - NPN support
 #   Dimitris Moraitis - Anon ciphersuites
 #   Martin von Loewis - python 3 port
 #   Yngve Pettersen (ported by Paul Sokolovsky) - TLS 1.2
 #
 # See the LICENSE file for legal information regarding use of this file.
 
@@ skipping 1552 matching lines @@
 
                 #Exchange ChangeCipherSpec and Finished messages
                 for result in self._sendFinished(session.masterSecret):
                     yield result
                 for result in self._getFinished(session.masterSecret):
                     yield result
 
                 #Set the session
                 self.session = session
                     
+                self.clientRandom = clientHello.random
+                self.serverRandom = serverHello.random
                 yield None # Handshake done!
 
         #Calculate the first cipher suite intersection.
         #This is the 'privileged' ciphersuite.  We'll use it if we're
         #doing a new negotiation.  In fact,
         #the only time we won't use it is if we're resuming a
         #session, in which case we use the ciphersuite from the session.
         #
         #Given the current ciphersuite ordering, this means we prefer SRP
         #over non-SRP.
@@ skipping 454 matching lines @@
             seed += bytearray(2)
             seed[len(seed) - 2] = len(context) >> 8
             seed[len(seed) - 1] = len(context) & 0xFF
             seed += context
         if self.version in ((3,1), (3,2)):
             return PRF(self.session.masterSecret, label, seed, length)
         elif self.version == (3,3):
             return PRF_1_2(self.session.masterSecret, label, seed, length)
         else:
             raise AssertionError()