Add changes and notes for [#2498]

diff --git a/CHANGES b/CHANGES
index d87e86a96de60ca2a99570988b6b50e428054977..c88380912f4e07cca38ee1ada89a0747037ccabf 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5590.  [bug]           Process NSEC3PARAM queue when loading a dynamic zone.
+                       This will immediately create NSEC3 records for zones
+                       that use "dnssec-policy" and "nsec3param". [GL #2498]
+
 5589.  [placeholder]
 
 5588.  [func]          Add "purge-keys" option to "dnssec-policy". This sets

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index c08c6f6954b096975bf4f8478b1dfce37f8ea21d..54733d22c3707a0caa6b9dd4026a80d86c6923da 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -54,5 +54,8 @@ Bug Fixes
   UDP sockets that we enabled during the DNS Flag Day 2020 to fix this issue.
   [GL #2487]
 
+- NSEC3 records were not immediately created when signing a dynamic zone with
+  ``dnssec-policy`` and ``nsec3param``. This has been fixed [GL #2498].
+
 - An invalid direction field (not one of 'N'/'S' or 'E'/'W') in a LOC record
   triggered an INSIST failure. [GL #2499]