From 8e20216f25624524d7d6e0322e85e6ccb47e3778 Mon Sep 17 00:00:00 2001 From: Andrey Andreev Date: Wed, 5 Feb 2014 18:59:55 +0200 Subject: More CI_Encryption improvements - Make OpenSSL the default driver if available (because MCrypt is stupid). - Require MCRYPT_DEV_URANDOM for the MCrypt availability check (because security; also, incidentally - it's faster that way ;)). --- user_guide_src/source/installation/upgrade_300.rst | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) (limited to 'user_guide_src') diff --git a/user_guide_src/source/installation/upgrade_300.rst b/user_guide_src/source/installation/upgrade_300.rst index 94385978e..a88d34e39 100644 --- a/user_guide_src/source/installation/upgrade_300.rst +++ b/user_guide_src/source/installation/upgrade_300.rst @@ -340,9 +340,10 @@ Following numerous vulnerability reports, the :doc:`Encrypt Library <../librarie been deprecated and a new, :doc:`Encryption Library <../libraries/encryption>` is added to take its place. -The new library requires either the `MCrypt extension `_ or PHP 5.3.3 and -the `OpenSSL extension `_. While this might be rather inconvenient, it is -a requirement that allows us to have properly implemented cryptographic functions. +The new library requires either the `MCrypt extension `_ (and /dev/urandom +availability) or PHP 5.3.3 and the `OpenSSL extension `_. +While this might be rather inconvenient, it is a requirement that allows us to have properly +implemented cryptographic functions. .. note:: The :doc:`Encrypt Library <../libraries/encrypt>` is still available for the purpose of keeping backwards compatibility. -- cgit v1.2.3-24-g4f1b