From 22cd63bf811fea683bc86e84b7649ce679d53122 Mon Sep 17 00:00:00 2001 From: Matthijs Mekking Date: Fri, 25 Jun 2021 11:43:29 +0200 Subject: [PATCH] Add change and release note for [#1126] Seems pretty newsworthy. --- CHANGES | 5 +++++ doc/notes/notes-current.rst | 4 +++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/CHANGES b/CHANGES index 72c9a9b44a..316b029606 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,8 @@ +5669. [func] Add 'checkds' feature. Zones with "dnssec-policy" and + "parental-agents" configured will check for DS presence + and are able to perform automatic KSK rollover. + [GL #1126] + 5668. [bug] When a zone fails to load on startup, the setnsec3param task is rescheduled. This caused a hang on shutdown, and is now fixed. [GL #2791] diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index ddeb2d7fd7..0e92cda1b1 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -28,7 +28,9 @@ Known Issues New Features ~~~~~~~~~~~~ -- None. +- Automatic KSK rollover: A new configuration option ``parental-agents`` is + added to add a list of servers to a zone that can be used for checking DS + presence. :gl:`#1126` Removed Features ~~~~~~~~~~~~~~~~