Add change and release note for [#1126]

Seems pretty newsworthy.

diff --git a/CHANGES b/CHANGES
index 72c9a9b44adb159fcc4803c7b861d7618cc6aeb6..316b029606b9d399c2310b6327e4eb9126e4f27c 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5669.  [func]          Add 'checkds' feature. Zones with "dnssec-policy" and
+                       "parental-agents" configured will check for DS presence
+                       and are able to perform automatic KSK rollover.
+                       [GL #1126]
+
 5668.  [bug]           When a zone fails to load on startup, the setnsec3param
                        task is rescheduled. This caused a hang on shutdown, and
                        is now fixed. [GL #2791]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index ddeb2d7fd76219c02c46a99725c5559447d5d101..0e92cda1b14a94c2cd635fa36d9f94d05fa9a063 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -28,7 +28,9 @@ Known Issues
 New Features
 ~~~~~~~~~~~~
 
-- None.
+- Automatic KSK rollover: A new configuration option ``parental-agents`` is
+  added to add a list of servers to a zone that can be used for checking DS
+  presence. :gl:`#1126`
 
 Removed Features
 ~~~~~~~~~~~~~~~~