diff --git a/Troubleshooting:kernel.mw b/Troubleshooting:kernel.mw
index 937709cda9f17f9e113236accfb41e4f639a537e..bf232dfec17aaf822e5219f9dfda31f10120a1bb 100644
--- a/Troubleshooting:kernel.mw
+++ b/Troubleshooting:kernel.mw
@@ -96,3 +96,13 @@ The defconfig used is available at <code>~/android/lineage/kernel/motorola/msm82
 
 ==== Error: selected processor does not support ARM mode `smc #0' ====
 Try this patch: https://github.com/imoseyon/leanKernel-galaxy-nexus/pull/6
+
+=== TLS (SSL/HTTPS) is broken! ===
+If you see messages like these, when trying to access HTTPS pages, read on:
+<pre>
+Connecting to pastebin.com (104.20.209.21:443)
+ssl_client: pastebin.com: TLS connect failed
+wget: error getting response: Connection reset by peer
+</pre>
+
+You are probably running an older kernel (pre 3.17), which does not yet have the "getrandom" syscall. This is required by modern openssl/libressl versions (Alpine was on libressl for a long time, then switched back to openssl). Check your kernel version, and if that is the case, and [[the Mainline Kernel|mainlining]] is not feasible for you, consider backporting the getrandom syscall like done in {{MR|69|pmaports}}. This issue was discussed in {{issue|107|pmaports}}.