My guess would be that OpenSSL is waiting for the system randomness
source to properly seed. This was an intentional change. Without it
security will likely be lost.
Paul Dale
On 6/5/21 8:34 pm, Sravani Maddukuri via openssl-users wrote:
Hi,
I have updated the openssl version running on the switch from 1.1.1g
to 1.1.1h and eventually to 1.1.1k.
Starting 1.1.1h, I am observing that the switch hangs for a
significant amount of time (> 3 minutes) when the call RAND_write_file
is invoked from the switch software.
The same call (RAND_write_file) invoked from the switch software with
the earlier versions of openssl (1.1.1g) did not make the switch to
hang for the noticeable time. Can you please help me understand why
this behavior is and suggest a solution if any?
Regards,
Sravani
This electronic communication and the information and any files
transmitted with it, or attached to it, are confidential and are
intended solely for the use of the individual or entity to whom it is
addressed and may contain information that is confidential, legally
privileged, protected by privacy laws, or otherwise restricted from
disclosure to anyone else. If you are not the intended recipient or
the person responsible for delivering the e-mail to the intended
recipient, you are hereby notified that any use, copying,
distributing, dissemination, forwarding, printing, or copying of this
e-mail is strictly prohibited. If you received this e-mail in error,
please return the e-mail to the sender, delete it from your computer,
and destroy any printed copy of it.
