Issue #23025: Add a mention of os.urandom to RAND_bytes and RAND_pseudo_bytes docs.

Patch by Alex Gaynor.

diff --git a/Doc/library/ssl.rst b/Doc/library/ssl.rst
index 465bf8f219a073023f2c468bac02334eef7a7438..141dcb2c890fefc0aa446ef9f5e9efc0d42dd7ce 100644 (file)
--- a/Doc/library/ssl.rst
+++ b/Doc/library/ssl.rst
@@ -292,6 +292,8 @@ Random generation
    can be used to check the status of the PRNG and :func:`RAND_add` can be used
    to seed the PRNG.
 
+   For almost all applications :func:`os.urandom` is preferable.
+
    Read the Wikipedia article, `Cryptographically secure pseudorandom number
    generator (CSPRNG)
    <http://en.wikipedia.org/wiki/Cryptographically_secure_pseudorandom_number_generator>`_,
@@ -311,6 +313,8 @@ Random generation
    for non-cryptographic purposes and for certain purposes in cryptographic
    protocols, but usually not for key generation etc.
 
+   For almost all applications :func:`os.urandom` is preferable.
+
    .. versionadded:: 3.3
 
 .. function:: RAND_status()