From: Matthijs Mekking <matthijs@isc.org>
Date: Wed, 17 Mar 2021 09:09:59 +0000 (+0100)
Subject: Add CHANGES and notes for [#2517]
X-Git-Tag: v9.17.12~27^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=841e90c6fcf0c55f3a52e1abd587b17c7f13080a;p=thirdparty%2Fbind9.git

Add CHANGES and notes for [#2517]
---

diff --git a/CHANGES b/CHANGES
index 11a16ebdc8b..313883173b9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5606.	[bug]		CDS/CDNSKEY DELETE records were not removed when a zone
+			transitioned from secure to insecure. "named-checkzone"
+			should not complain if such records exist in an
+			unsigned zone. [GL #2517]
+
 5605.	[bug]		"dig -u" now uses CLOCK_REALTIME for more accurate
 			time reporting. [GL #2592]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 149cf43fd03..2ebdff3f27f 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -42,6 +42,10 @@ Bug Fixes
 - Dynamic zones with ``dnssec-policy`` that were frozen could not be thawed.
   This has been fixed. [GL #2523]
 
+- CDS/CDNSKEY DELETE records are now removed when a zone transitioned from
+  secure to insecure. "named-checkzone" no longer complains if such records
+  exist in an unsigned zone. [GL #2517]
+
 - Fix a crash when transferring a zone over TLS, after "named" previously
   skipped a master. [GL #2562]