Adhere to draft-ietf-dnsop-nsec-ttl with signing

diff --git a/Changelog b/Changelog
index 5ade564aa50fa0ead4bfc7f7f94e7b1c33504fa5..1cb47686ae859672b5111d403076f26590549285 100644 (file)
--- a/Changelog
+++ b/Changelog
@@ -20,6 +20,8 @@
          Enable with --enable-rrtype-svcb-https.
        * bugfix #117: Assertion failure with DNSSEC validating of 
          non existence of RR types at the root.  Thanks ZjYwMj
+       * Set NSEC(3) ttls to the minimum of the MINIMUM field of the SOA
+         record and the TTL of the SOA itself. draft-ietf-dnsop-nsec-ttl
 
 1.7.1  2019-07-26
        * bugfix: Manage verification paths for OpenSSL >= 1.1.0