#1104425 softhsm2: tries to load rdrand engine

Package:
src:softhsm2
Source:
src:softhsm2
Submitter:
Kurt Roeckx
Date:
2025-05-03 17:03:01 UTC
Severity:
normal
Tags:
#1104425#5
Date:
2025-04-29 20:44:58 UTC
From:
To:
I've been told that it ties to load rdrand: <https://github.com/softhsm/SoftHSMv2/blob/557b2fd49c64639c4b13416283d91a60748d61a7/src/lib/crypto/OSSLCryptoFactory.cpp#L147>

But we don't have the rdrand engine in Debian.

Kurt
#1104425#10
Date:
2025-05-03 08:17:32 UTC
From:
To:
Hello Kurt,

softhsm2, as you point out, trys to load RDRAND. However as you
point out, openssl has disabled the RDRAND engine.

Given there is no visible problem caused by this, could you please
explain why you consider this to be serious?


Best,
Chris
#1104425#19
Date:
2025-05-03 16:52:35 UTC
From:
To:
On May 3, 2025 10:17:32 AM GMT+02:00, Chris
I've been told the following:
We use SoftHSM in our tests of pkcs11-provider, using Debian. We came
across that the rdrand engine is expected to be loaded.
When it does not exist, the load adds an error to the stack and the
tests fail. If I understand correctly, the way the error code is
checked is in softhsm code.