From: Ondřej Surý <ondrej@sury.org>
Date: Fri, 25 May 2018 14:33:46 +0000 (+0200)
Subject: Add note about removing ECC-GOST to release notes
X-Git-Tag: v9.13.1~14^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e771326f6038b566ef312698a0111e275d0612d2;p=thirdparty%2Fbind9.git

Add note about removing ECC-GOST to release notes
---

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 553c7da716a..1c7085fda4e 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -179,6 +179,15 @@
 	  command.
 	</para>
       </listitem>
+      <listitem>
+	<para>
+	  Support for ECC-GOST (GOST R 34.11-94) algorithm has been
+	  removed from BIND as the algorithm has been superseded by
+	  GOST R 34.11-2012 in RFC6986 and it must not be used in new
+	  deployments.  BIND will neither create new DNSSEC keys,
+	  signatures and digest, nor it will validate them.
+	</para>
+      </listitem>
     </itemizedlist>
   </section>