From: Matthijs Mekking <matthijs@isc.org>
Date: Wed, 26 Jul 2023 09:55:20 +0000 (+0200)
Subject: Add CHANGES and release note for #4032
X-Git-Tag: v9.19.16~10^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0bdf1980c4c8d5750858578f97b16a4a4ecb32db;p=thirdparty%2Fbind9.git

Add CHANGES and release note for #4032
---

diff --git a/CHANGES b/CHANGES
index e568b930f3f..a5e1482b856 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6219.	[bug]		Ignore 'max-zone-ttl' on 'dnssec-policy insecure'.
+			[GL #4032]
+
 6218.	[func]		Add inline-signing to dnssec-policy. [GL #3677]
 
 6217.	[func]		The dns_badcache unit was refactored to use cds_lfht
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index c2e2a53268c..69019896036 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -55,6 +55,10 @@ Bug Fixes
   uninterrupted time spent by resolving long cached chains of domain names.
   :gl:`#4185`
 
+- Ignore :any:`max-zone-ttl` for :any:`dnssec-policy` "insecure",
+  otherwise some zones will not be loaded if they use a TTL value larger
+  than 86400. :gl:`#4032`.
+
 Known Issues
 ~~~~~~~~~~~~