X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=FAQ;h=58650cfd74e5ddafb992b3839b63908fbfb4315c;hp=2a037df36d42b8a090e9c50c3dbf370fbfdc48ba;hb=97853bd5c1f0e82bfe1eeaf0b57fbe4f98488f2c;hpb=0816bc220b2e65af16f8285039fdd17c4c789349

diff --git a/FAQ b/FAQ
index 2a037df36d..58650cfd74 100644
--- a/FAQ
+++ b/FAQ
@@ -79,9 +79,11 @@ the popular web browsers without RSA support.
 
 * Is OpenSSL thread-safe?
 
-Yes.  On Windows and many Unix systems, OpenSSL automatically uses the
-multi-threaded versions of the standard libraries.  If your platform
-is not one of these, consult the INSTALL file.
+Yes (with limitations: an SSL connection may not concurrently be used
+by multiple threads).  On Windows and many Unix systems, OpenSSL
+automatically uses the multi-threaded versions of the standard
+libraries.  If your platform is not one of these, consult the INSTALL
+file.
 
 Multi-threaded applications must provide two callback functions to
 OpenSSL.  This is described in the threads(3) manpage.
@@ -103,6 +105,11 @@ application you are using.  It is likely that it never worked
 correctly.  OpenSSL 0.9.5 makes the error visible by refusing to
 perform potentially insecure encryption.
 
+Most components of the openssl command line tool try to use the
+file $HOME/.rnd (or $RANDFILE, if this environment variable is set)
+for seeding the PRNG.  If this file does not exist or is too short,
+the "PRNG not seeded" error message may occur.
+
 
 * Why does the linker complain about undefined symbols?
 
@@ -124,7 +131,7 @@ option "no-asm", as described in INSTALL:
  des_ede3_cbc_encrypt, des_encrypt, des_encrypt2, des_encrypt3,
  des_ncbc_encrypt, md5_block_asm_host_order, sha1_block_asm_data_order
 
-If that doesn't help, you may want to try using the current snapshot.
+If none of these helps, you may want to try using the current snapshot.
 If the problem persists, please submit a bug report.