From: Matthijs Mekking <matthijs@isc.org>
Date: Wed, 14 Oct 2020 08:10:01 +0000 (+0200)
Subject: Add changes and notes for kasp NSEC3 support
X-Git-Tag: v9.16.10~9^2~7
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c993bc19a0531d4011b162dfdccbd17d612b6bd5;p=thirdparty%2Fbind9.git

Add changes and notes for kasp NSEC3 support

This feature is news worthy.

(cherry picked from commit 9adad77ac3e0799c1eac4591d9b941e320e955ce)
---

diff --git a/CHANGES b/CHANGES
index 5a65d2a8159..230d5ffcc5d 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5538.	[func]		Add NSEC3 support for zones that manage DNSSEC with
+			the 'dnssec-policy' configuration. A new option
+			'nsec3param' can be used to set the NSEC3 parameters.
+			[GL #1620]
+
 5534.	[bug]		The synthesised CNAME from a DNAME was incorrectly
 			followed when the QTYPE was CNAME or ANY. [GL #2280]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index f13fae1d97a..3fe2bdb7472 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -36,6 +36,10 @@ Feature Changes
 
 - None.
 
+- Add NSEC3 support for zones that manage their DNSSEC with the `dnssec-policy`
+  configuration. A new option 'nsec3param' can be used to set the desired
+  NSEC3 parameters. [GL #1620].
+
 Bug Fixes
 ~~~~~~~~~