From: Pieter Lexis <pieter.lexis@powerdns.com>
Date: Tue, 5 Sep 2017 12:54:51 +0000 (+0200)
Subject: Document the SoftHSM/Botan interaction
X-Git-Tag: rec-4.1.0-rc1~47^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F5665%2Fhead;p=thirdparty%2Fpdns.git

Document the SoftHSM/Botan interaction
---

diff --git a/docs/dnssec/pkcs11.rst b/docs/dnssec/pkcs11.rst
index c884d3f5cf..1982e875da 100644
--- a/docs/dnssec/pkcs11.rst
+++ b/docs/dnssec/pkcs11.rst
@@ -18,6 +18,11 @@ empty. PIN is required for assigning keys to zone.
 Using with SoftHSM
 ------------------
 
+.. warning::
+  Due to an interaction between `SoftHSM and Botan <https://github.com/PowerDNS/pdns/issues/2496>`__,
+  the PowerDNS Authoritative Server **will most likely** crash on exit when built with ``--enable-botan1.10 --enable-experimental-pkcs11``.
+  This is the case with the packages provided from the PowerDNS repositories.
+
 To test this feature, a software HSM can be used. It is **not
 recommended** to use this in production.