Document random_provider option in random section

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/24498)

diff --git a/doc/man5/config.pod b/doc/man5/config.pod
index 5150e413c5fe4157cab72a6c5b0f4af88d8f2cc1..c1c5a5b0aba6a84d75bd3e6012940bbfed4530e2 100644 (file)
--- a/doc/man5/config.pod
+++ b/doc/man5/config.pod
@@ -478,6 +478,12 @@ to access the same randomness sources from outside the validated boundary.
 
 This sets the property query used when fetching the randomness source.
 
+=item B<random_provider>
+
+This sets the provider to use for the L<RAND_bytes(3)> calls instead of the built-in
+entropy sources.  It defaults to "fips".  If the named provider is not loaded, the
+built-in entropy sources will be used.
+
 =back
 
 =head1 EXAMPLES
@@ -581,6 +587,7 @@ L<ASN1_generate_nconf(3)>,
 L<EVP_set_default_properties(3)>,
 L<CONF_modules_load(3)>,
 L<CONF_modules_load_file(3)>,
+L<RAND_bytes(3)>,
 L<fips_config(5)>, and
 L<x509v3_config(5)>.