From 5b5c24d99e5e220ec4f5c0bbc623e75ee752a721 Mon Sep 17 00:00:00 2001
From: Pauli <ppzgs1@gmail.com>
Date: Thu, 23 May 2024 12:13:46 +1000
Subject: [PATCH] Document random_provider option in random section

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/24498)
---
 doc/man5/config.pod | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/doc/man5/config.pod b/doc/man5/config.pod
index 5150e413c5f..c1c5a5b0aba 100644
--- a/doc/man5/config.pod
+++ b/doc/man5/config.pod
@@ -478,6 +478,12 @@ to access the same randomness sources from outside the validated boundary.
 
 This sets the property query used when fetching the randomness source.
 
+=item B<random_provider>
+
+This sets the provider to use for the L<RAND_bytes(3)> calls instead of the built-in
+entropy sources.  It defaults to "fips".  If the named provider is not loaded, the
+built-in entropy sources will be used.
+
 =back
 
 =head1 EXAMPLES
@@ -581,6 +587,7 @@ L<ASN1_generate_nconf(3)>,
 L<EVP_set_default_properties(3)>,
 L<CONF_modules_load(3)>,
 L<CONF_modules_load_file(3)>,
+L<RAND_bytes(3)>,
 L<fips_config(5)>, and
 L<x509v3_config(5)>.
 
-- 
2.47.2