Add CHANGE and release note for #1611

Feature change.

(cherry picked from commit 92f98002e75a1e679e1561dd0c6ae8708bda14f0)

diff --git a/CHANGES b/CHANGES
index 35fe7239a8d696ea5677e8cecfd5cc2b8a75e3f3..5c8236d6f93c2bc767eb3ac361f1a39a82b40f40 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5896.  [func]          Add some more dnssec-policy checks to detect weird
+                       policies. [GL #1611]
+
 5895.  [test]          Add new set of unit test macros and move the unit
                        tests under single namespace in /tests/. [GL !6243]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index e786ef5e99ed33cb22a1278289d9a53e3863c6d8..3a6ddd8b5de8901911f7c2b9d92f551a45903561 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -35,7 +35,9 @@ Removed Features
 Feature Changes
 ~~~~~~~~~~~~~~~
 
-- None.
+- Some more ``dnssec-policy`` configuration checks have been added to
+  detect weird policies such as missing KSK and/or ZSK, and too short
+  key lifetimes and re-sign periods. :gl:`#1611`.
 
 Bug Fixes
 ~~~~~~~~~