From e4144fb9cf910b7d25b6a849f14f36307e5588b9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ond=C5=99ej=20Sur=C3=BD?= <ondrej@sury.org>
Date: Sun, 21 Jul 2019 08:18:56 -0400
Subject: [PATCH] Add CHANGES and release note

---
 CHANGES           |  4 ++++
 doc/arm/notes.xml | 11 +++++++++++
 2 files changed, 15 insertions(+)

diff --git a/CHANGES b/CHANGES
index 40c9bc9749..53bd0aae5b 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5271.	[func]		The normal (non-debugging) output of dnssec-signzone
+			and dnssec-verify tools now goes to stdout, instead of
+			the combination of stderr and stdout.
+
 5270.	[bug]		'dig +expandaaaa +short' did not work. [GL #1152]
 
 5269.	[port]		cygwin: can return ETIMEDOUT on connect() with a
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index c82d3b0894..cdd45ff338 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -277,6 +277,17 @@
 	  algorithm and same Server Secret for the best performance.
 	</para>
       </listitem>
+      <listitem>
+	<para>
+	  The information from the <command>dnssec-signzone</command> and
+	  <command>dnssec-verify</command> commands is now printed to standard
+	  output.  The standard error output is only used to print warnings and
+	  errors, and in case the user requests the signed zone to be printed to
+	  standard output with <command>-f -</command> option.  A new
+	  configuration option <command>-q</command> has been added to silence
+	  all output on standard output except for the name of the signed zone.
+	</para>
+      </listitem>
     </itemizedlist>
   </section>