From: Aram Sargsyan <aram@isc.org>
Date: Wed, 8 Dec 2021 16:04:32 +0000 (+0000)
Subject: Add CHANGES for [GL #2264]
X-Git-Tag: v9.17.22~31^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=7ae4bc7710f9cd516c986323b7301869ff8c2351;p=thirdparty%2Fbind9.git

Add CHANGES for [GL #2264]
---

diff --git a/CHANGES b/CHANGES
index 8d2346d06f4..649f85c27c3 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5782.	[func]		Use ECDSA P-256 instead of a 4096-bit RSA when
+			generating ephemeral key and certificate for the
+			'tls ephemeral' configuration. [GL #2264]
+
 5781.	[bug]		Make BIND work with OpenSSL 3.0.1 as it is now
 			enforcing minimum buffer lengths in EVP_MAC_final and
 			hence EVP_DigestSignFinal.  rndc and TSIG at a minimum