File openssl-TESTS-Disable-default-provider-crypto-policies.patch of Package openssl-3
Index: openssl-3.5.0/apps/openssl.cnf
===================================================================
--- openssl-3.5.0.orig/apps/openssl.cnf
+++ openssl-3.5.0/apps/openssl.cnf
@@ -45,12 +45,12 @@ tsa_policy3 = 1.2.3.4.5.7
[openssl_init]
providers = provider_sect
# Load default TLS policy configuration
-ssl_conf = ssl_module
-alg_section = evp_properties
-random = random
+##ssl_conf = ssl_module
+##alg_section = evp_properties
+##random = random
-[random]
-seed=JITTER
+##[random]
+##seed=JITTER
[ evp_properties ]
# This section is intentionally added empty here to be tuned on particular systems
@@ -65,20 +65,20 @@ seed=JITTER
# to side-channel attacks and as such have been deprecated.
[provider_sect]
-default = default_sect
+##default = default_sect
##legacy = legacy_sect
-[default_sect]
-activate = 1
+##[default_sect]
+##activate = 1
##[legacy_sect]
##activate = 1
-[ ssl_module ]
-system_default = crypto_policy
+##[ ssl_module ]
+##system_default = crypto_policy
-[ crypto_policy ]
-.include = /etc/crypto-policies/back-ends/opensslcnf.config
+##[ crypto_policy ]
+##.include = /etc/crypto-policies/back-ends/opensslcnf.config
####################################################################
[ ca ]