diff options
| author | Paul Kehrer <paul.l.kehrer@gmail.com> | 2014-01-31 10:44:36 -0600 |
|---|---|---|
| committer | Paul Kehrer <paul.l.kehrer@gmail.com> | 2014-01-31 10:44:36 -0600 |
| commit | 8042b2988d71d3675e06d25416e285215ae98636 (patch) | |
| tree | 64180961035e46a22281210475dedbfe379c2bea /docs/hazmat/backends/openssl.rst | |
| parent | 16e5e4d2659a0e6cbea44f561914142c80554a73 (diff) | |
| download | cryptography-8042b2988d71d3675e06d25416e285215ae98636.tar.gz cryptography-8042b2988d71d3675e06d25416e285215ae98636.tar.bz2 cryptography-8042b2988d71d3675e06d25416e285215ae98636.zip | |
more explanation of what an active osrandom engine means
Diffstat (limited to 'docs/hazmat/backends/openssl.rst')
| -rw-r--r-- | docs/hazmat/backends/openssl.rst | 14 |
1 files changed, 10 insertions, 4 deletions
diff --git a/docs/hazmat/backends/openssl.rst b/docs/hazmat/backends/openssl.rst index 79c58857..81361f5a 100644 --- a/docs/hazmat/backends/openssl.rst +++ b/docs/hazmat/backends/openssl.rst @@ -41,10 +41,16 @@ its entropy from ``/dev/urandom`` on UNIX-like operating systems and uses allows us to avoid potential issues with `initializing the RNG`_ as well as protecting us from the ``fork()`` weakness. -This engine is **active** by default when importing the OpenSSL backend. It is -added to the engine list but **not activated** if you only import the binding. -If you wish to deactivate it call ``unregister_osrandom_engine()`` on the -backend object. +This engine is **active** by default when importing the OpenSSL backend. When +active this engine will be used to generate all the random data OpenSSL +requests. + +If you wish to deactivate the engine you may call +``unregister_osrandom_engine()`` on the backend object. + +When importing only the binding it is added to the engine list but +**not activated**. + OS Random Sources ----------------- |