From: Witold Kręcicki <wpk@isc.org>
Date: Wed, 13 May 2020 09:43:46 +0000 (+0200)
Subject: CHANGES note
X-Git-Tag: v9.17.7~11^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=bc19dc84ba0223b08d53033f399a62a7a8b51325;p=thirdparty%2Fbind9.git

CHANGES note
---

diff --git a/CHANGES b/CHANGES
index 8897c1d3470..d7abfabb052 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5531.	[func]		Add a netmgr TLS layer, enabling server-side DoT
+			support (not yet available), and client-side DoT
+			support in dig with "dig +tls". [GL #1840]
+
 5530.	[bug]		DNSTAP did not capture responses to forwarded
 			UPDATE requests. [GL #2252]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index bdcad868bea..a4ce7dfe8c7 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -47,6 +47,12 @@ Feature Changes
   before they ever reach ``dig``.  Consequently, the option has been
   removed. [GL #2140]
 
+- Support for DNS over TLS (DoT) has been added to the network manager API, and
+  the support for DoT has been added to the ``dig`` tool and support for
+  listening on TLS port has been added to ``named``.  ``named`` could use a
+  certificate provided by the user or it can generate an ephemeral certificate
+  on startup of the daemon.
+
 Bug Fixes
 ~~~~~~~~~