From 4162eed87325ac74de2d275a18c4843b672b9bee Mon Sep 17 00:00:00 2001 From: Henning Westerholt Date: Wed, 9 Oct 2019 15:39:14 +0200 Subject: [PATCH] tls: small extensions in parameter docs related to PRNG engines --- src/modules/tls/doc/params.xml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml index bf400da6c89..301183c566a 100644 --- a/src/modules/tls/doc/params.xml +++ b/src/modules/tls/doc/params.xml @@ -1258,14 +1258,14 @@ end krand - use internal kam_rand() function - fastrand - use internal fastrand function - cryptorand - use internal cryptorand (fortuna) function + fastrand - use internal fastrand (ISAAC) function + cryptorand - use internal cryptorand (Fortuna) function kxlibssl - default libssl rand engine wrapped by a &kamailio; mutex Note: the krand and fastrand engines are not recommended for use on systems requiring strong security, as they may not generate numbers - with enough randomness. + with enough randomness and are not cryptographically secure. The default value is empty (not set) for libssl v1.0.x or older, and