CHANGES and release note for [GL #4364]

diff --git a/CHANGES b/CHANGES
index ed0d0520200b78da228151d940cc98743eb0f811..779ac09389a35285b7dc6ec1870cb76b86451a39 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,11 @@
+6311.  [func]          Zone content checks are now disabled by default
+                       when running named-compilezone. named-checkzone
+                       can still be used for checking zone integrity,
+                       or the former checks in named-compilezone can be
+                       re-enabled by using "named-compilezone -i full
+                       -k fail -n fail -r warn -m warn -M warn -S warn
+                       -T warn -W warn -C check-svcb:fail". [GL #4364]
+
 6310.  [bug]           Memory leak in zone.c:sign_zone. When named signed a
                        zone it could leak dst_keys due to a misplaced
                        'continue'. [GL #4488]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index fbb4897a942bcb70665390d89f768ac002055760..bebf1cd3b7900f0c6207f11a5e02de8bb80664ff 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -32,6 +32,13 @@ Feature Changes
 
 - None.
 
+- :program:`named-compilezone` no longer performs zone integrity checks
+  by default; this allows faster conversion of a zone file from one format
+  to another. Zone checks can be performed by running :program:`named-checkzone`
+  separately, or the previous default behavior can be restored by using
+  ``named-compilezone -i full -k fail -n fail -r warn -m warn -M warn
+  -S warn -T warn -W warn -C check-svcb:fail``. :gl:`#4364`
+
 Bug Fixes
 ~~~~~~~~~