From: Matthijs Mekking <matthijs@isc.org>
Date: Thu, 17 Mar 2022 09:03:02 +0000 (+0100)
Subject: Add CHANGES and release note for #1129
X-Git-Tag: v9.19.22~70^2~18
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=006bc4e1a7485e97826872184829ce93931cac82;p=thirdparty%2Fbind9.git

Add CHANGES and release note for #1129

Newsworthy.
---

diff --git a/CHANGES b/CHANGES
index d70f42d04ca..b22184cf5e1 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+6329.	[func]		Add HSM support for dnssec-policy. You can now
+			configure keys with a key-store that allows you to
+			set the directory to store key files and to set a
+			PKCS #11 URI string. [GL #1129]
+
 6328.	[doc]		Update ZSK minimum lifetime documentation in ARM, also
 			depends on signing delay. [GL #4510]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 9867bbdc3ad..9aa27c16aef 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -28,6 +28,11 @@ New Features
 - The statistics channel now includes counters that indicate the number
   of currently connected TCP IPv4/IPv6 clients. :gl:`#4425`
 
+- Add HSM support to :any:`dnssec-policy`. You can now configure keys with a
+  ``key-store`` that allows you to set the directory to store the key files and
+  set a PKCS#11 URI string. The latter requires OpenSSL 3 and a valid PKCS#11
+  provider to be configured for OpenSSL. :gl`#1129`.
+
 Removed Features
 ~~~~~~~~~~~~~~~~