From: Mark Andrews <marka@isc.org>
Date: Mon, 11 Oct 2021 01:52:46 +0000 (+1100)
Subject: Add release note for [GL #2843]
X-Git-Tag: v9.17.20~19^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=df1d8c9e9be223f12ab696bce5ccf95836007cd5;p=thirdparty%2Fbind9.git

Add release note for [GL #2843]
---

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 37be6d1e514..b7f8f0e08b2 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -51,6 +51,12 @@ Removed Features
 - Native PKCS#11 support has been removed; BIND 9 now uses OpenSSL engine_pkcs11 from the
   OpenSC project. :gl:`#2691`
 
+- Add support for OpenSSL 3.0.0.  OpenSSL 3.0.0 deprecated 'engine' support.
+  If OpenSSL 3.0.0 has been built without support for deprecated functionality
+  pkcs11 via engine_pkcs11 is no longer available.  At this point in time
+  there is no replacement ``provider`` for pkcs11 which is the replacement to
+  the ``engine API``. :gl:`#2843`
+
 - The ``masterfile-format`` format ``map`` has removed.  If you are using the
   ``map`` format, you are advised to convert the zones to ``raw`` format with
   ``named-compilezone`` and change the configuration prior to BIND 9