From: Matthijs Mekking <matthijs@isc.org>
Date: Tue, 28 Mar 2023 14:05:20 +0000 (+0200)
Subject: Add CHANGES and release notes for #3901
X-Git-Tag: v9.19.12~28^2~5
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=148ce1f678ac301551e893b555446f0d635414e7;p=thirdparty%2Fbind9.git

Add CHANGES and release notes for #3901

This is a new feature that deserves attention.
---

diff --git a/CHANGES b/CHANGES
index c7ac45f7a71..f5a5a86b96f 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6140.	[func]		Implement automatic parental-agents ('checkds yes').
+			[GL #3901]
+
 6139.	[func]		Add isc_histo_t general-purpose log-linear histograms,
 			and use them for message size statistics. [GL !7696]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 208086c7e16..65aa488eedc 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -34,6 +34,11 @@ New Features
   INFO log level to the DEBUG(1) log level, to prevent ``delv`` from
   emitting that message when setting up its internal resolver. :gl:`#3842`
 
+- A new configuration option :any:`checkds` is introduced that when set to
+  ``yes`` will detect :any:`parental-agents` automatically by resolving the
+  parent NS records. These name servers will be used to check the DS RRset
+  during a KSK rollover initiated by :any:`dnssec-policy`. :gl:`#3901`
+
 Removed Features
 ~~~~~~~~~~~~~~~~