[sr-dev] git:5.2:dde78715: tls: docs - documented cryptorand engine for prng

[Daniel-Constantin Mierla]

Module: kamailio
Branch: 5.2
Commit: dde78715ce88c8bfb6530559fcaa3a182ca72af7
URL: https://github.com/kamailio/kamailio/commit/dde78715ce88c8bfb6530559fcaa3a182ca72af7

Author: Daniel-Constantin Mierla <miconda at gmail.com>
Committer: Daniel-Constantin Mierla <miconda at gmail.com>
Date: 2019-10-07T15:16:27+02:00

tls: docs - documented cryptorand engine for prng

(cherry picked from commit 398641926648a32b635f39f655ae3231038b9c3d)

---

Modified: src/modules/tls/doc/params.xml

---

Diff:  https://github.com/kamailio/kamailio/commit/dde78715ce88c8bfb6530559fcaa3a182ca72af7.diff
Patch: https://github.com/kamailio/kamailio/commit/dde78715ce88c8bfb6530559fcaa3a182ca72af7.patch

---

diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml
index 6028642b5f..dc6494c2db 100644
--- a/src/modules/tls/doc/params.xml
+++ b/src/modules/tls/doc/params.xml
@@ -1251,7 +1251,7 @@ end
 		is not designed for multi-process applications and can result in a crash.
 		Therefore set the PRNG engine to one of the options listed in this
 		section. If libssl 1.1.x (or newer) is detected at compile time, then
-		the PRNG engine is set to "fastrand".
+		the PRNG engine is set to "cryptorand".
 	</para>
 	<para>
 		The following options are avaialble:
@@ -1259,10 +1259,16 @@ end
 	<itemizedlist>
 		<listitem><para>krand - use internal kam_rand() function</para></listitem>
 		<listitem><para>fastrand - use internal fastrand function</para></listitem>
+		<listitem><para>cryptorand - use internal cryptorand (fortuna) function</para></listitem>
 	</itemizedlist>
+	<para>
+		Note: the krand and fastrand engines are not recommended for use on
+		systems requiring strong security, as they may not generate numbers
+		with enough randomness.
+	</para>
 	<para>
 		The default value is empty (not set) for libssl v1.0.x or older, and
-		"fastrand" for libssl v1.1.x or newer.
+		"cryptorand" for libssl v1.1.x or newer.
 	</para>
 	<example>
 	    <title>Set <varname>rand_engine</varname> parameter</title>