PRNG not available when multiple providers are configured?

Dr Paul Dale paul.dale at oracle.com
Tue Nov 3 21:35:47 UTC 2020


> Ah ha! This explanation makes sense to me and indeed pointed me at the real problem. I had recompiled OpenSSL but I forgot to update the hmac in fips.cnf via fipsinstall. So yes, the fips provider was failing to activate because of that. As soon I fixed the hmac RAND_status() started working for me. So THANKS for that! :-)

Not producing any diagnostic output for a failed checksum seems like a bug.


Pauli
-- 
Dr Paul Dale | Distinguished Architect | Cryptographic Foundations 
Phone +61 7 3031 7217
Oracle Australia


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20201104/fcacf74a/attachment-0001.html>


More information about the openssl-users mailing list