From: Matthijs Mekking <matthijs@isc.org>
Date: Wed, 19 Feb 2020 11:28:52 +0000 (+0100)
Subject: update CHANGES
X-Git-Tag: v9.17.1~69^2~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6ddfed3de0531d91b43fbdd28e258527dc35f331;p=thirdparty%2Fbind9.git

update CHANGES
---

diff --git a/CHANGES b/CHANGES
index a6a44f5125a..fac15650254 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,20 @@
+5365.	[bug]		Algorithm rollover was stuck on submitting DS
+			because keymgr thought it would move to an invalid
+			state.  Fixed by when checking the current key,
+			check it against the desired state, not the existing
+			state. [GL #1626]
+
+5364.	[bug]		Algorithm rollover waited too long before introducing
+			zone signatures.  It waited to make sure all signatures
+			were resigned, but when introducing a new algorithm,
+			all signatures are resigned immediately.  Only
+			add the sign delay if there is a predecessor key.
+			[GL #1625]
+
+5363.	[bug]		When changing a dnssec-policy, existing keys with
+			properties that no longer match were not being retired.
+			[GL #1624]
+
 5362.	[func]		Limit the size of IXFR responses so that AXFR will
 			be used instead if it would be smaller. This is
 			controlled by the "max-ixfr-ratio" option, which