From: Mark Andrews <marka@isc.org>
Date: Thu, 21 Jul 2022 23:13:09 +0000 (+1000)
Subject: Add release note for [GL #3469]
X-Git-Tag: v9.19.4~10^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0d31135ca2a2da5615e2350d7712a7c2355b1c75;p=thirdparty%2Fbind9.git

Add release note for [GL #3469]
---

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index bbc6fc35bfb..a41370d4964 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -41,7 +41,12 @@ Removed Features
 Feature Changes
 ~~~~~~~~~~~~~~~
 
-- None.
+- DNSSEC ``RSASHA1`` and ``NSEC3RSASHA1`` are automatically disabled
+  on systems (e.g. RHEL9) where they are disallowed by the security
+  policy.  Primary zones using those algorithms need to be moved
+  off of them prior to running on these systems as graceful migration
+  to different DNSSEC algorithms is not possible when RSASHA1 is
+  disallowed by the OS. :gl:`#3469`
 
 Bug Fixes
 ~~~~~~~~~