Document the SoftHSM/Botan interaction

diff --git a/docs/dnssec/pkcs11.rst b/docs/dnssec/pkcs11.rst
index c884d3f5cf29ea25a75272ba5e2cff980875937f..1982e875da1d0e900b3106c9e8e90a67f18296d9 100644 (file)
--- a/docs/dnssec/pkcs11.rst
+++ b/docs/dnssec/pkcs11.rst
@@ -18,6 +18,11 @@ empty. PIN is required for assigning keys to zone.
 Using with SoftHSM
 ------------------
 
+.. warning::
+  Due to an interaction between `SoftHSM and Botan <https://github.com/PowerDNS/pdns/issues/2496>`__,
+  the PowerDNS Authoritative Server **will most likely** crash on exit when built with ``--enable-botan1.10 --enable-experimental-pkcs11``.
+  This is the case with the packages provided from the PowerDNS repositories.
+
 To test this feature, a software HSM can be used. It is **not
 recommended** to use this in production.