OpenSSL 3.0 FIPS module configuration file

Richard Dymond rjdymond at
Mon Feb 14 15:25:27 UTC 2022


Probably a dumb question, but why must the FIPS module configuration file
for OpenSSL 3.0 be generated on every machine that it is to be used on
(i.e. must not be copied from one machine to another)?

I just ran 'openssl fipsinstall' on two different machines with the same
FIPS module and it produced exactly the same output each time, so
presumably the reason has nothing to do with the config file being unique
to the machine.

Does it have something to do with the FIPS standard itself?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the openssl-users mailing list