[FAB-9938] Add alert about not using TLS

Added an alert to remind user to enable TLS on the Fabric CA server. Change-Id: Iec6d3cb33a830c742c0fdbd0ac84ed0bf59d9331 Signed-off-by: Anil Ambati <[email protected]>
hyperledger · Jun 5, 2018 · 7aa2298 · 7aa2298
1 parent 7c3fc1a
commit 7aa2298
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/docs/source/users-guide.rst b/docs/source/users-guide.rst
@@ -481,6 +481,10 @@ name and password for a bootstrap identity.
 To cause the Fabric CA server to listen on ``https`` rather than
 ``http``, set ``tls.enabled`` to ``true``.
 
+SECURITY WARNING: The Fabric CA server should always be started with TLS
+enabled (``tls.enabled`` set to true). Failure to do so leaves the
+server vulnerable to an attacker with access to network traffic.
+
 To limit the number of times that the same secret (or password) can be
 used for enrollment, set the ``registry.maxenrollments`` in the configuration
 file to the appropriate value. If you set the value to 1, the Fabric CA