From: Artem Boldariev <artem@boldariev.com>
Date: Mon, 21 Feb 2022 14:02:32 +0000 (+0200)
Subject: Mention TLS certs verification in the CHANGES and Release Notes
X-Git-Tag: v9.19.0~41^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=40db7dfcc14a322c1b8be72150d22732ddf838cc;p=thirdparty%2Fbind9.git

Mention TLS certs verification in the CHANGES and Release Notes

This commit adds points to the CHANGES and the release notes about
supporting remote TLS certificates verification and support for Strict
and Mutual TLS transport connections verification.
---

diff --git a/CHANGES b/CHANGES
index dc6429a66df..71b31cd4daa 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5839.	[func]		Add support for remote TLS certificates
+			verification, both to BIND and dig, making it possible
+			to implement Strict and Mutual TLS authentication,
+			as described in RFC 9103, Section 9.3. [GL #3163]
+
 5838.	[cleanup]	When modifying a member zone in a catalog zone, and it
 			is detected that the zone exists and was not created by
 			the current catalog zone, distinguish the two cases when
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 16ec7999ddf..ca90a971b9b 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -60,6 +60,10 @@ New Features
   specify a journal file to read when loading the zone to be verified or
   signed. :gl:`#2486`
 
+- Add support for remote TLS certificates verification, both to BIND
+  and ``dig``, making it possible to implement Strict and Mutual TLS
+  authentication, as described in RFC 9103, Section 9.3. :gl:`#3163`
+
 Removed Features
 ~~~~~~~~~~~~~~~~