Add CHANGES and release note

Introduce the new 'dnssec-ksr' tool.

diff --git a/CHANGES b/CHANGES
index 00c0720632bf9d08614b75a9bab8949fa24dde66..98cc7731ac3872eb926afcb0c68b2cbead6e12dd 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,10 @@
+6377.  [func]          Introduce 'dnssec-ksr', a DNSSEC tool to create
+                       Key Signing Requests (KSRs) and Signed Key Responses
+                       (SKRs). [GL #1128]
+
 6376.  [func]          Allow 'dnssec-keygen' options '-f' and '-k' to be used
                        together to create a subset of keys from the DNSSEC
-                       policy.
+                       policy. [GL !8188]
 
 6375.  [func]          Allow multiple RNDC message to be processed from
                        a single TCP read. [GL #4416]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 11e9c68b01236b6d37bab078cbf43e46fe336a7c..de2101c5652766feefbba6627b70317d4cfc1598 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -23,6 +23,9 @@ New Features
 - A new option :any:`signatures-jitter` is added to :any:`dnssec-policy` to
   spread out signature expiration times over a period of time. :gl:`#4554`
 
+- A new DNSSEC tool :iscman:`dnssec-ksr` is added to create Key Signing Request
+  (KSR) and Signed Key Response (SKR) files. :gl:`#1128`
+
 Removed Features
 ~~~~~~~~~~~~~~~~