Update notes, changes for #1612

diff --git a/CHANGES b/CHANGES
index 1d53a4f525f0901a1699fbd5c6bbd000b5472775..19b891cad02a3d634bb8e1a7c0d8b9c9414b9c61 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+5451.  [func]          Add 'rndc dnssec -status' command. [GL #1612]
+
 5450.  [placeholder]
 
 5449.  [bug]           Fix a socket shutdown race in netmgr udp. [GL #1938]

diff --git a/doc/man/rndc.8in b/doc/man/rndc.8in
index 01f5ab372925d9e8ac386b7e9d23869e58dabd94..6403302a5935dd2d0eac68103602df7ed41e6a72 100644 (file)
--- a/doc/man/rndc.8in
+++ b/doc/man/rndc.8in
@@ -164,7 +164,7 @@ See also \fBrndc addzone\fP and \fBrndc modzone\fP\&.
 .TP
 \fBdnssec\fP [\fB\-status\fP \fIzone\fP [\fIclass\fP [\fIview\fP]]
 Show the DNSSEC signing state for the specified zone.  Requires the
-zone to have a \fBdnssec-policy\fP.
+zone to have a "dnssec\-policy".
 .TP
 \fBdnstap\fP ( \fB\-reopen\fP | \fB\-roll\fP [\fInumber\fP] )
 Close and re\-open DNSTAP output files. \fBrndc dnstap \-reopen\fP allows

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index ce8ddc72b43a9ddb3080b15409ee6418f6bb97bc..7d161d4709f9495491c0de167d06f5f1502af719 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -29,6 +29,10 @@ New Features
 Feature Changes
 ~~~~~~~~~~~~~~~
 
+- New ``rndc`` command ``rndc dnssec -status`` that shows the current
+  DNSSEC policy and keys in use, the key states and rollover status.
+  [GL #1612]
+
 - Disable and disallow static linking of BIND 9 binaries and libraries
   as BIND 9 modules require ``dlopen()`` support and static linking also
   prevents using security features like read-only relocations (RELRO) or