Add release note for [GL #3142]

(cherry picked from commit e48af3698100b2e69971e2cc5fc09ee300bbedc7)

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index d4649724e2e14306d43856f5940916727ab78f45..9acb10397146f8a43175735e02cc2218e2bc4c87 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -59,3 +59,9 @@ Bug Fixes
   miscalculated in certain resolution scenarios, potentially causing the
   value of the counter to drop below zero. This has been fixed.
   :gl:`#3147`
+
+- Invalid dnssec-policy definitions were being accepted where the
+  defined keys did not cover both KSK and ZSK roles for a given
+  algorithm.  This is now checked for and the dnssec-policy is
+  rejected if both roles are not present for all algorithms in use.
+  :gl:`#3142`