Changes and release notes for [#2596]

diff --git a/CHANGES b/CHANGES
index 3c752cc442b7d62ec76839d2fccea03a3f9fb6d3..2d214f7d915f66aac3cdfefa1f9e15d1d8a85b61 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5634.  [bug]           Don't roll keys when the private key file is offline.
+                       [GL #2596]
+
 5633.  [doc]           Inline-signing was incorrectly described as being
                        inherited from the options / view levels and was
                        incorrectly accepted at those levels without effect.

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index b9b48a46c48cfdb08266ff3d85efded785f72647..aa3cdde8924fa6a09cb9cc5930d11dcd83f3bde3 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -82,3 +82,6 @@ Bug Fixes
   between the new keys too. :gl:`#2628`
 
 - Update ZONEMD to match RFC 8976. :gl:`#2658`
+
+- With ``dnssec-policy```, don't roll keys if the private key file is offline.
+  :gl:`#2596`