[sr-dev] git:master:4162eed8: tls: small extensions in parameter docs related to PRNG engines

Henning Westerholt hw at skalatan.de
Wed Oct 9 15:41:06 CEST 2019


Module: kamailio
Branch: master
Commit: 4162eed87325ac74de2d275a18c4843b672b9bee
URL: https://github.com/kamailio/kamailio/commit/4162eed87325ac74de2d275a18c4843b672b9bee

Author: Henning Westerholt <hw at skalatan.de>
Committer: Henning Westerholt <hw at skalatan.de>
Date: 2019-10-09T15:39:14+02:00

tls: small extensions in parameter docs related to PRNG engines

---

Modified: src/modules/tls/doc/params.xml

---

Diff:  https://github.com/kamailio/kamailio/commit/4162eed87325ac74de2d275a18c4843b672b9bee.diff
Patch: https://github.com/kamailio/kamailio/commit/4162eed87325ac74de2d275a18c4843b672b9bee.patch

---

diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml
index bf400da6c8..301183c566 100644
--- a/src/modules/tls/doc/params.xml
+++ b/src/modules/tls/doc/params.xml
@@ -1258,14 +1258,14 @@ end
 	</para>
 	<itemizedlist>
 		<listitem><para>krand - use internal kam_rand() function</para></listitem>
-		<listitem><para>fastrand - use internal fastrand function</para></listitem>
-		<listitem><para>cryptorand - use internal cryptorand (fortuna) function</para></listitem>
+		<listitem><para>fastrand - use internal fastrand (ISAAC) function</para></listitem>
+		<listitem><para>cryptorand - use internal cryptorand (Fortuna) function</para></listitem>
 		<listitem><para>kxlibssl - default libssl rand engine wrapped by a &kamailio; mutex</para></listitem>
 	</itemizedlist>
 	<para>
 		Note: the krand and fastrand engines are not recommended for use on
 		systems requiring strong security, as they may not generate numbers
-		with enough randomness.
+		with enough randomness and are not cryptographically secure.
 	</para>
 	<para>
 		The default value is empty (not set) for libssl v1.0.x or older, and




More information about the sr-dev mailing list