Update documentation with !1706 fix

(cherry picked from commit f47e697da3ef468b663f43f219e352a2300c84d7)

diff --git a/CHANGES b/CHANGES
index 9db9511b7c57f5c8bdcac981abdd309224c11d56..6eca426a1b1f2760abe741f03656f3c38efe4f4b 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5372.  [bug]           Fix migration from existing DNSSEC key files using
+                       auto-dnssec maintain to dnssec-policy. [GL #1706]
+
 5371.  [bug]           Improve incremental updates of the RPZ summary
                        database to reduce delays that could occur when
                        a policy zone update included a large number of

diff --git a/doc/arm/notes-9.16.2.xml b/doc/arm/notes-9.16.2.xml
index 0508e27a425a7d4f5b3d85f5ff63e03502f79c75..f71de90c83b9d7a76c41a7be20e9e0d3a12ab390 100644 (file)
--- a/doc/arm/notes-9.16.2.xml
+++ b/doc/arm/notes-9.16.2.xml
@@ -63,6 +63,14 @@
          reducing such delays. [GL #1447]
         </para>
       </listitem>
+      <listitem>
+        <para>
+         Migration to dnssec-policy from existing DNSSEC strategy with
+         auto-dnssec maintain did not work due to bad initializing of the
+         key states.  Fixed by looking closely at the time metadata to
+         set the key states to the correct values. [GL #1706]
+        </para>
+      </listitem>
     </itemizedlist>
   </section>