From: Ondřej Surý <ondrej@sury.org>
Date: Thu, 20 May 2021 14:35:48 +0000 (+0200)
Subject: Add CHANGES and release note for GL #2691
X-Git-Tag: v9.17.19~45^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=79de2ee528eafed0f64549c68af7a83253558c1a;p=thirdparty%2Fbind9.git

Add CHANGES and release note for GL #2691
---

diff --git a/CHANGES b/CHANGES
index f96de232051..518b5e75b58 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5712.	[func]		Remove native PKCS#11 support in favor of OpenSSL
+			engine_pkcs11 from the OpenSC project. [GL #2691]
+
 5711.	[bug]		"map" files exceeding 2GB in size could fail to
 			load due to a size comparison that incorrectly
 			treated the file size as a signed integer. [GL #2878]
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 9543909b7c6..3d999eacf46 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -29,7 +29,8 @@ New Features
 Removed Features
 ~~~~~~~~~~~~~~~~
 
-- None.
+- Native PKCS#11 support has been removed; BIND 9 now uses OpenSSL engine_pkcs11 from the
+  OpenSC project. :gl:`#2691`
 
 Feature Changes
 ~~~~~~~~~~~~~~~