Bug ID 1127169: The BIG-IP can reboot due to failure to initialize the OpenSSL FIPS RNG

Last Modified: Jul 11, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 17.0.0, 17.0.0.1, 17.0.0.2

Fixed In:
17.1.0, 16.1.4

Opened: Jul 18, 2022

Severity: 3-Major

Symptoms

There is a possibility that BIG-IP can reboot due to failure to initialize the OpenSSL FIPS RNG.

Impact

The BIG-IP device reboots randomly.

Conditions

- BIG-IP versions 16.1.3 and above. - FIPS 140-3 license is installed on BIG-IP or it is a FullBoxFIPS device. - Establish multiple SSL/TLS connections.

Workaround

None

Fix Information

Updated serialization to use RDTSC instruction to read CPU time stamp in jitterentropy-lib to generate random numbers.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips