[master] revise CHANGES note and add release note

diff --git a/CHANGES b/CHANGES
index f3ed2409ebb55989225e3dffaeac1f87a04e6293..f1588a547c81245795793e6075e92030a641c5ac 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,4 +1,8 @@
-4665.  [func]          Add Ed25519 support (RFC 8080). [RT #25519]
+4665.  [protocol]      Added support for ED25519 and ED448 DNSSEC signing
+                       algorithms (RFC 8080). (Note: these algorithms
+                       depend on code currently in the development branch
+                       of OpenSSL which has not yet been released.)
+                       [RT #44696]
 
 4664.  [func]          Add a "glue-cache" option to enable or disable the
                        glue cache. The default is "no" to reduce memory

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 54152d53e2845873f71f23f75e279646a98fd0bb..6729459a771453b8caafa3c48d8422275819226d 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -373,6 +373,22 @@
     </itemizedlist>
   </section>
 
+  <section xml:id="proto_changes"><info><title>Protocol Changes</title></info>
+    <itemizedlist>
+      <listitem>
+       <para>
+         BIND can now use the Ed25519 and Ed448 Edwards Curve DNSSEC
+         signing algorithms described in RFC 8080. Note, however, that
+         these algorithms must be supported in OpenSSL;
+         currently they are only available in the development branch
+         of OpenSSL at
+         <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="https://github.com/openssl/openssl">https://github.com/openssl/openssl</link>.
+         [RT #44696]
+       </para>
+      </listitem>
+    </itemizedlist>
+  </section>
+
   <section xml:id="relnotes_changes"><info><title>Feature Changes</title></info>
     <itemizedlist>
       <listitem>