Add changes and release note for #4350

(cherry picked from commit a8306b541b3204ab746486814a9c7b8f8475196d)

diff --git a/CHANGES b/CHANGES
index 41fde2e83c0216bf922ded7384fd9a9e480765fd..1d3064e7c42fd6546bb3bb69c483fbb156951384 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6265.  [bug]           Don't schedule resign operations on the raw version
+                       of an inline-signing zone. [GL #4350]
+
 6261.  [bug]           Fix a possible assertion failure on an error path in
                        resolver.c:fctx_query(), when using an uninitialized
                        link. [GL #4331]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 1d9d712db74e4c864db70594aaa62fd09c922fe7..1c3a09a6f1d706c55292b2a68e8d0abee5cae20a 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -35,7 +35,9 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
-- None.
+- For inline-signing zones, if the unsigned version of the zone contains
+  DNSSEC records, it was scheduled to be resigning. This unwanted behavior
+  has been fixed. :gl:`#4350`
 
 Known Issues
 ~~~~~~~~~~~~