Back out panic message, add new warning to FIPS docs (#16243)

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
This commit is contained in:
Alexander Scheel
2022-07-12 17:05:45 -04:00
committed by GitHub
parent 477869e90c
commit bae0f15548

View File

@@ -95,8 +95,9 @@ consider migration of specific workloads to the FIPS-backed cluster.
Entropy Augmentation **does not** work with FIPS 140-2 Inside. The internal Entropy Augmentation **does not** work with FIPS 140-2 Inside. The internal
BoringCrypto RNG is FIPS 140-2 certified and does not accept entropy from BoringCrypto RNG is FIPS 140-2 certified and does not accept entropy from
other sources. Attempting to use Entropy Augmentation will result in failures other sources. On Vault 1.11.0 and later, attempting to use Entropy
at runtime such as `panic: boringcrypto: invalid code execution`. Augmentation will result in a warning ("Entropy Augmentation is not supported...")
and Entropy Augmentation will be disabled.
#### TLS Restrictions #### TLS Restrictions