Back out panic message, add new warning to FIPS docs (#16243)

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
This commit is contained in:
Alexander Scheel
2022-07-12 17:05:45 -04:00
committed by GitHub
parent 477869e90c
commit bae0f15548

View File

@@ -95,8 +95,9 @@ consider migration of specific workloads to the FIPS-backed cluster.
Entropy Augmentation **does not** work with FIPS 140-2 Inside. The internal
BoringCrypto RNG is FIPS 140-2 certified and does not accept entropy from
other sources. Attempting to use Entropy Augmentation will result in failures
at runtime such as `panic: boringcrypto: invalid code execution`.
other sources. On Vault 1.11.0 and later, attempting to use Entropy
Augmentation will result in a warning ("Entropy Augmentation is not supported...")
and Entropy Augmentation will be disabled.
#### TLS Restrictions