From: Ondřej Surý <ondrej@sury.org>
Date: Mon, 14 May 2018 10:43:19 +0000 (+0200)
Subject: Add release notes.
X-Git-Tag: v9.13.0~13^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=087eab022f81fd826612f29175be33b75a5827f1;p=thirdparty%2Fbind9.git

Add release notes.
---

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index e0a37f87289..f22186bd7d7 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -127,11 +127,38 @@
 	  implementation of "rbt") has been removed. [GL #217]
 	</para>
       </listitem>
+      <listitem>
+	<para>
+	  The <command>-r randomdev</command> option to explicitly select
+	  random device has been removed from
+	  <command>ddns-confgen</command>,
+	  <command>rndc-confgen</command>,
+	  <command>nsupdate</command>,
+	  <command>dnssec-confgen</command>, and
+	  <command>dnssec-signzone</command> commands.
+	</para>
+	<para>
+	  The <command>-p</command> option to use pseudo-random data
+	  has been removed from <command>dnssec-signzone</command>
+	  command.
+	</para>
+      </listitem>
     </itemizedlist>
   </section>
 
   <section xml:id="relnotes_changes"><info><title>Feature Changes</title></info>
     <itemizedlist>
+      <listitem>
+	<para>
+	  BIND will now always you use the best CSPRNG
+	  (cryptographically-secure pseudo-random number generator)
+	  available on the platform where it is compiled.  It will use
+	  arc4random() family of functions on BSDs, getrandom() on
+	  Linux and Solaris, CryptGenRandom on Windows, and the
+	  selected cryptographic library (OpenSSL or PKCS#11) provider
+	  as the last resort. [GL #221]
+	</para>
+      </listitem>
       <listitem>
 	<para>
 	  BIND can no longer be built without DNSSEC support. A cryptography