Switch hangs for significant amount of time when using RAND_write_file API with openssl version 1.1.1h and above.

[Dr Paul Dale]

My guess would be that OpenSSL is waiting for the system randomness 
source to properly seed.  This was an intentional change.  Without it 
security will likely be lost.

Paul Dale

On 6/5/21 8:34 pm, Sravani Maddukuri via openssl-users wrote:
> Hi,
>
> I have updated the openssl version running on the switch from 1.1.1g 
> to 1.1.1h and eventually to 1.1.1k.
> Starting 1.1.1h, I am observing that the switch hangs for a 
> significant amount of time (> 3 minutes) when the call RAND_write_file 
> is invoked from the switch software.
> The same call (RAND_write_file) invoked from the switch software with 
> the earlier versions of openssl (1.1.1g) did not make the switch to 
> hang for the noticeable time. Can you please help me understand why 
> this behavior is and suggest a solution if any?
>
> Regards,
> Sravani
>
> This electronic communication and the information and any files 
> transmitted with it, or attached to it, are confidential and are 
> intended solely for the use of the individual or entity to whom it is 
> addressed and may contain information that is confidential, legally 
> privileged, protected by privacy laws, or otherwise restricted from 
> disclosure to anyone else. If you are not the intended recipient or 
> the person responsible for delivering the e-mail to the intended 
> recipient, you are hereby notified that any use, copying, 
> distributing, dissemination, forwarding, printing, or copying of this 
> e-mail is strictly prohibited. If you received this e-mail in error, 
> please return the e-mail to the sender, delete it from your computer, 
> and destroy any printed copy of it. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20210507/ba6af81c/attachment.html>