[issue28854] FIPS mode causes dead-lock in ssl module

Christian Heimes report at bugs.python.org
Thu Dec 1 15:42:50 EST 2016


Christian Heimes added the comment:

It's a dead lock in OpenSSL. :(

    if (n == CRYPTO_LOCK_RAND) {
        fprintf(stderr, "%s%s %i %s:%i\n",
                (mode & CRYPTO_READ) ? "R" : "W",
                (mode & CRYPTO_LOCK) ? "L" : "U",
                n, file, line);
    }

test_random (test.test_ssl.BasicSocketTests) ... RLCK 18 fips_drbg_rand.c:124
RUNL 18 fips_drbg_rand.c:126

 RAND_status is 1 (sufficient randomness)
WLCK 18 fips_drbg_rand.c:80
WUNL 18 fips_drbg_rand.c:109
WLCK 18 fips_drbg_rand.c:80
WUNL 18 fips_drbg_rand.c:109
WLCK 18 md_rand.c:230
WUNL 18 md_rand.c:262
WLCK 18 md_rand.c:311
WUNL 18 md_rand.c:324
RLCK 18 fips_drbg_rand.c:124
RUNL 18 fips_drbg_rand.c:126
WLCK 18 rand_lib.c:240
RLCK 18 fips_drbg_rand.c:124

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue28854>
_______________________________________


More information about the Python-bugs-list mailing list