Add CHANGES and release note for #4032

diff --git a/CHANGES b/CHANGES
index e568b930f3f0ee88fcdf42ebd511a3edb3165e9f..a5e1482b856f9c4513bb938dbf5d20ecebde8724 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6219.  [bug]           Ignore 'max-zone-ttl' on 'dnssec-policy insecure'.
+                       [GL #4032]
+
 6218.  [func]          Add inline-signing to dnssec-policy. [GL #3677]
 
 6217.  [func]          The dns_badcache unit was refactored to use cds_lfht

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index c2e2a53268cda3bf93a255f33279fa86166c6795..6901989603697e025e287f52a911b56f9e8d80a6 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -55,6 +55,10 @@ Bug Fixes
   uninterrupted time spent by resolving long cached chains of domain names.
   :gl:`#4185`
 
+- Ignore :any:`max-zone-ttl` for :any:`dnssec-policy` "insecure",
+  otherwise some zones will not be loaded if they use a TTL value larger
+  than 86400. :gl:`#4032`.
+
 Known Issues
 ~~~~~~~~~~~~