PRNG not available when multiple providers are configured?
Dr Paul Dale
paul.dale at oracle.com
Tue Nov 3 21:35:47 UTC 2020
> Ah ha! This explanation makes sense to me and indeed pointed me at the real problem. I had recompiled OpenSSL but I forgot to update the hmac in fips.cnf via fipsinstall. So yes, the fips provider was failing to activate because of that. As soon I fixed the hmac RAND_status() started working for me. So THANKS for that! :-)
Not producing any diagnostic output for a failed checksum seems like a bug.
Pauli
--
Dr Paul Dale | Distinguished Architect | Cryptographic Foundations
Phone +61 7 3031 7217
Oracle Australia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20201104/fcacf74a/attachment-0001.html>
More information about the openssl-users
mailing list