>>> Configuration file difference? > >> which config file are you referring to? > > The default OpenSSL configuration file. openssl.cnf, in the directory displayed by "openssl version -d". But I can't think offhand of anything in the configuration file that I'd expect to have this sort of effect. I don't think even engines would normally have any effect on cipher-list processing this way. fyi, here /usr/bin/openssl version -v OpenSSL 1.1.0i-fips 14 Aug 2018 /usr/bin/openssl version -d OPENSSLDIR: "/etc/ssl" find /etc/ssl -type f | grep cnf /etc/ssl/openssl.cnf /usr/local/ssl-test/bin/openssl version -v OpenSSL 1.1.1c 28 May 2019 /usr/local/ssl-test/bin/openssl version -d OPENSSLDIR: "/usr/local/ssl-test" find /usr/local/ssl-test -type f | grep cnf (empty)
