Switch hangs for significant amount of time when using RAND_write_file API with openssl version 1.1.1h and above.

Dr Paul Dale pauli at openssl.org
Thu May 6 23:36:21 UTC 2021


My guess would be that OpenSSL is waiting for the system randomness 
source to properly seed.  This was an intentional change.  Without it 
security will likely be lost.

Paul Dale

On 6/5/21 8:34 pm, Sravani Maddukuri via openssl-users wrote:
> Hi,
>
> I have updated the openssl version running on the switch from 1.1.1g 
> to 1.1.1h and eventually to 1.1.1k.
> Starting 1.1.1h, I am observing that the switch hangs for a 
> significant amount of time (> 3 minutes) when the call RAND_write_file 
> is invoked from the switch software.
> The same call (RAND_write_file) invoked from the switch software with 
> the earlier versions of openssl (1.1.1g) did not make the switch to 
> hang for the noticeable time. Can you please help me understand why 
> this behavior is and suggest a solution if any?
>
> Regards,
> Sravani
>
> This electronic communication and the information and any files 
> transmitted with it, or attached to it, are confidential and are 
> intended solely for the use of the individual or entity to whom it is 
> addressed and may contain information that is confidential, legally 
> privileged, protected by privacy laws, or otherwise restricted from 
> disclosure to anyone else. If you are not the intended recipient or 
> the person responsible for delivering the e-mail to the intended 
> recipient, you are hereby notified that any use, copying, 
> distributing, dissemination, forwarding, printing, or copying of this 
> e-mail is strictly prohibited. If you received this e-mail in error, 
> please return the e-mail to the sender, delete it from your computer, 
> and destroy any printed copy of it. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20210507/ba6af81c/attachment.html>


More information about the openssl-users mailing list