diff --git a/src/include/ipxe/tls.h b/src/include/ipxe/tls.h
index b4a92a044..6985ae63f 100644
--- a/src/include/ipxe/tls.h
+++ b/src/include/ipxe/tls.h
@@ -309,10 +309,8 @@ struct tls_signature_hash_algorithm {
 
 /** TLS client random data */
 struct tls_client_random {
-	/** GMT Unix time */
-	uint32_t gmt_unix_time;
 	/** Random data */
-	uint8_t random[28];
+	uint8_t random[32];
 } __attribute__ (( packed ));
 
 /** An MD5+SHA1 context */
diff --git a/src/net/tls.c b/src/net/tls.c
index 4f8ea2692..73d470221 100644
--- a/src/net/tls.c
+++ b/src/net/tls.c
@@ -30,7 +30,6 @@ FILE_SECBOOT ( PERMITTED );
 #include <stdlib.h>
 #include <stdarg.h>
 #include <string.h>
-#include <time.h>
 #include <errno.h>
 #include <byteswap.h>
 #include <ipxe/pending.h>
@@ -3986,7 +3985,6 @@ int add_tls ( struct interface *xfer, const char *name,
 	tls_clear_cipher ( tls, &tls->rx.cipherspec.active );
 	tls_clear_cipher ( tls, &tls->rx.cipherspec.pending );
 	tls_clear_handshake ( tls );
-	tls->client.random.gmt_unix_time = time ( NULL );
 	iob_populate ( &tls->rx.iobuf, &tls->rx.header, 0,
 		       sizeof ( tls->rx.header ) );
 	INIT_LIST_HEAD ( &tls->rx.data );