OpenSSL 3.0 FIPS module configuration file

[Richard Dymond]

Hi

Probably a dumb question, but why must the FIPS module configuration file
for OpenSSL 3.0 be generated on every machine that it is to be used on
(i.e. must not be copied from one machine to another)?

I just ran 'openssl fipsinstall' on two different machines with the same
FIPS module and it produced exactly the same output each time, so
presumably the reason has nothing to do with the config file being unique
to the machine.

Does it have something to do with the FIPS standard itself?

Richard
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20220214/43650597/attachment.htm>