From 8042b2988d71d3675e06d25416e285215ae98636 Mon Sep 17 00:00:00 2001 From: Paul Kehrer Date: Fri, 31 Jan 2014 10:44:36 -0600 Subject: more explanation of what an active osrandom engine means --- docs/hazmat/backends/openssl.rst | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) (limited to 'docs/hazmat/backends/openssl.rst') diff --git a/docs/hazmat/backends/openssl.rst b/docs/hazmat/backends/openssl.rst index 79c58857..81361f5a 100644 --- a/docs/hazmat/backends/openssl.rst +++ b/docs/hazmat/backends/openssl.rst @@ -41,10 +41,16 @@ its entropy from ``/dev/urandom`` on UNIX-like operating systems and uses allows us to avoid potential issues with `initializing the RNG`_ as well as protecting us from the ``fork()`` weakness. -This engine is **active** by default when importing the OpenSSL backend. It is -added to the engine list but **not activated** if you only import the binding. -If you wish to deactivate it call ``unregister_osrandom_engine()`` on the -backend object. +This engine is **active** by default when importing the OpenSSL backend. When +active this engine will be used to generate all the random data OpenSSL +requests. + +If you wish to deactivate the engine you may call +``unregister_osrandom_engine()`` on the backend object. + +When importing only the binding it is added to the engine list but +**not activated**. + OS Random Sources ----------------- -- cgit v1.2.3