Add CHANGES and release notes for [GL #4586]

diff --git a/CHANGES b/CHANGES
index 67ad1f226527e9d75a04b2a135da1873768a8fd6..58e3475bda8108fb4e24db38724f5cc5939932c0 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6374.  [func]          Don't count expired / future RRSIGs in verification
+                       failure quota. [GL #4586]
+
 6373.  [func]          Offload the isc_http response processing to worker
                        thread. [GL #4680]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index cfbcc05c8d11ad70de6951bd89e5ed033a5b1565..8e3ac9e8b41e43de307786a426a9ef3f272e4969 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -36,6 +36,10 @@ Feature Changes
 - Querying the statistics channel no longer blocks the DNS communication
   on the networking event loop. :gl:`#4680`
 
+- DNSSEC signatures that are not valid because the current time falls outside
+  the signature inception and expiration dates no longer count towards maximum
+  validation and maximum validation failures limits. :gl:`#4586`
+
 Bug Fixes
 ~~~~~~~~~