From: Willem Toorop <willem@nlnetlabs.nl>
Date: Wed, 10 Feb 2021 11:46:47 +0000 (+0100)
Subject: Adhere to draft-ietf-dnsop-nsec-ttl with signing
X-Git-Tag: 1.8.0-rc.1~35
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=debdd09611448c40d11fcc72e9704f53390ff66d;p=thirdparty%2Fldns.git

Adhere to draft-ietf-dnsop-nsec-ttl with signing
---

diff --git a/Changelog b/Changelog
index 5ade564a..1cb47686 100644
--- a/Changelog
+++ b/Changelog
@@ -20,6 +20,8 @@
 	  Enable with --enable-rrtype-svcb-https.
 	* bugfix #117: Assertion failure with DNSSEC validating of 
 	  non existence of RR types at the root.  Thanks ZjYwMj
+	* Set NSEC(3) ttls to the minimum of the MINIMUM field of the SOA
+	  record and the TTL of the SOA itself. draft-ietf-dnsop-nsec-ttl
 
 1.7.1	2019-07-26
 	* bugfix: Manage verification paths for OpenSSL >= 1.1.0