[sr-dev] git:master:787b95a5: tls: docs for rand_engine parameter

[Daniel-Constantin Mierla]

Module: kamailio
Branch: master
Commit: 787b95a5a0573d4e81b2475a84bad59076e34faf
URL: https://github.com/kamailio/kamailio/commit/787b95a5a0573d4e81b2475a84bad59076e34faf

Author: Daniel-Constantin Mierla <miconda at gmail.com>
Committer: Daniel-Constantin Mierla <miconda at gmail.com>
Date: 2019-10-03T11:36:28+02:00

tls: docs for rand_engine parameter

---

Modified: src/modules/tls/doc/params.xml

---

Diff:  https://github.com/kamailio/kamailio/commit/787b95a5a0573d4e81b2475a84bad59076e34faf.diff
Patch: https://github.com/kamailio/kamailio/commit/787b95a5a0573d4e81b2475a84bad59076e34faf.patch

---

diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml
index 6ef2d4123f..6028642b5f 100644
--- a/src/modules/tls/doc/params.xml
+++ b/src/modules/tls/doc/params.xml
@@ -1241,6 +1241,39 @@ end
 	    </example>
 	</section>
 
+	<section id="tls.p.rand_engine">
+	<title><varname>rand_engine</varname> (str)</title>
+	<para>
+		Set the ranondom number generator engine for libssl.
+	</para>
+	<para>
+		Note: the default random number generator (PRNG) engine of libssl v1.1.x
+		is not designed for multi-process applications and can result in a crash.
+		Therefore set the PRNG engine to one of the options listed in this
+		section. If libssl 1.1.x (or newer) is detected at compile time, then
+		the PRNG engine is set to "fastrand".
+	</para>
+	<para>
+		The following options are avaialble:
+	</para>
+	<itemizedlist>
+		<listitem><para>krand - use internal kam_rand() function</para></listitem>
+		<listitem><para>fastrand - use internal fastrand function</para></listitem>
+	</itemizedlist>
+	<para>
+		The default value is empty (not set) for libssl v1.0.x or older, and
+		"fastrand" for libssl v1.1.x or newer.
+	</para>
+	<example>
+	    <title>Set <varname>rand_engine</varname> parameter</title>
+	    <programlisting>
+...
+modparam("tls", "rand_engine", "fastrand")
+...
+	    </programlisting>
+	</example>
+	</section>
+
 	<section id="tls.p.engine">
 	<title><varname>engine</varname> (string)</title>
 	<para>