diff --git a/CHANGES b/CHANGES index 72c9a9b44a..316b029606 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,8 @@ +5669. [func] Add 'checkds' feature. Zones with "dnssec-policy" and + "parental-agents" configured will check for DS presence + and are able to perform automatic KSK rollover. + [GL #1126] + 5668. [bug] When a zone fails to load on startup, the setnsec3param task is rescheduled. This caused a hang on shutdown, and is now fixed. [GL #2791] diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index ddeb2d7fd7..0e92cda1b1 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -28,7 +28,9 @@ Known Issues New Features ~~~~~~~~~~~~ -- None. +- Automatic KSK rollover: A new configuration option ``parental-agents`` is + added to add a list of servers to a zone that can be used for checking DS + presence. :gl:`#1126` Removed Features ~~~~~~~~~~~~~~~~