From: Pauli <ppzgs1@gmail.com>
Date: Thu, 23 May 2024 02:13:46 +0000 (+1000)
Subject: Document random_provider option in random section
X-Git-Tag: openssl-3.5.0-alpha1~663
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5b5c24d99e5e220ec4f5c0bbc623e75ee752a721;p=thirdparty%2Fopenssl.git

Document random_provider option in random section

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/24498)
---

diff --git a/doc/man5/config.pod b/doc/man5/config.pod
index 5150e413c5f..c1c5a5b0aba 100644
--- a/doc/man5/config.pod
+++ b/doc/man5/config.pod
@@ -478,6 +478,12 @@ to access the same randomness sources from outside the validated boundary.
 
 This sets the property query used when fetching the randomness source.
 
+=item B<random_provider>
+
+This sets the provider to use for the L<RAND_bytes(3)> calls instead of the built-in
+entropy sources.  It defaults to "fips".  If the named provider is not loaded, the
+built-in entropy sources will be used.
+
 =back
 
 =head1 EXAMPLES
@@ -581,6 +587,7 @@ L<ASN1_generate_nconf(3)>,
 L<EVP_set_default_properties(3)>,
 L<CONF_modules_load(3)>,
 L<CONF_modules_load_file(3)>,
+L<RAND_bytes(3)>,
 L<fips_config(5)>, and
 L<x509v3_config(5)>.