diff options
author | Pauli <paul.dale@oracle.com> | 2020-07-14 02:27:39 +0200 |
---|---|---|
committer | Richard Levitte <levitte@openssl.org> | 2020-07-16 09:12:27 +0200 |
commit | 8b4c89f8d2d0a277ad9f66e98d8f308ebb4ef8c4 (patch) | |
tree | 6bec3079a319cafc9888ca4989848d0c55e3235a | |
parent | ENGINESDIR: document that this configuration is deprecated. (diff) | |
download | openssl-8b4c89f8d2d0a277ad9f66e98d8f308ebb4ef8c4.tar.xz openssl-8b4c89f8d2d0a277ad9f66e98d8f308ebb4ef8c4.zip |
RAND: document that the ENGINE RAND override is deprecated.
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12226)
-rw-r--r-- | doc/man3/RAND_set_rand_method.pod | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/doc/man3/RAND_set_rand_method.pod b/doc/man3/RAND_set_rand_method.pod index bd6606c81f..a989c1c9b4 100644 --- a/doc/man3/RAND_set_rand_method.pod +++ b/doc/man3/RAND_set_rand_method.pod @@ -23,7 +23,8 @@ RAND_OpenSSL() returns the default B<RAND_METHOD> implementation by OpenSSL. This implementation ensures that the PRNG state is unique for each thread. If an B<ENGINE> is loaded that provides the RAND API, however, it will -be used instead of the method returned by RAND_OpenSSL(). +be used instead of the method returned by RAND_OpenSSL(). This is deprecated +in OpenSSL 3.0. RAND_set_rand_method() makes B<meth> the method for PRNG use. If an ENGINE was providing the method, it will be released first. @@ -58,6 +59,11 @@ L<RAND_bytes(3)>, L<ENGINE_by_id(3)>, L<RAND(7)> +=head1 HISTORY + +The ability for an B<ENGINE> to replace the RAND API was deprecated in +OpenSSL 3.0. + =head1 COPYRIGHT Copyright 2000-2020 The OpenSSL Project Authors. All Rights Reserved. |