From: Ondřej Surý <ondrej@sury.org>
Date: Thu, 18 Oct 2018 14:13:30 +0000 (+0200)
Subject: Add release notes for the FIPS mode feature
X-Git-Tag: v9.13.4~109^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=60862c5769d4ba4ed2c7acbddfb1c53284bf27a9;p=thirdparty%2Fbind9.git

Add release notes for the FIPS mode feature
---

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 29839b35cf4..9a4b0911ead 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -207,6 +207,15 @@
 	  in the respective principals.
 	</para>
       </listitem>
+      <listitem>
+	<para>
+	  The new configure option <command>--enable-fips-mode</command>
+	  can be used to make BIND enable and enforce FIPS mode in the
+	  OpenSSL library.  When compiled with such option the BIND will
+	  refuse to run if FIPS mode can't be enabled, thus this option
+	  must be only enabled for the systems where FIPS mode is available.
+	</para>
+      </listitem>
     </itemizedlist>
   </section>