From: Evan Hunt <each@isc.org>
Date: Mon, 31 Jul 2017 17:17:11 +0000 (-0700)
Subject: [master] revise CHANGES note and add release note
X-Git-Tag: v9.12.0a1~159
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=913f7528fe8ab2e4102fa23cc3c8c99c80fc323b;p=thirdparty%2Fbind9.git

[master] revise CHANGES note and add release note
---

diff --git a/CHANGES b/CHANGES
index f3ed2409ebb..f1588a547c8 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,4 +1,8 @@
-4665.	[func]		Add Ed25519 support (RFC 8080). [RT #25519]
+4665.	[protocol]	Added support for ED25519 and ED448 DNSSEC signing
+			algorithms (RFC 8080). (Note: these algorithms
+			depend on code currently in the development branch
+			of OpenSSL which has not yet been released.)
+			[RT #44696]
 
 4664.	[func]		Add a "glue-cache" option to enable or disable the
 			glue cache. The default is "no" to reduce memory
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 54152d53e28..6729459a771 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -373,6 +373,22 @@
     </itemizedlist>
   </section>
 
+  <section xml:id="proto_changes"><info><title>Protocol Changes</title></info>
+    <itemizedlist>
+      <listitem>
+	<para>
+	  BIND can now use the Ed25519 and Ed448 Edwards Curve DNSSEC
+	  signing algorithms described in RFC 8080. Note, however, that
+	  these algorithms must be supported in OpenSSL;
+	  currently they are only available in the development branch
+	  of OpenSSL at
+	  <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="https://github.com/openssl/openssl">https://github.com/openssl/openssl</link>.
+	  [RT #44696]
+	</para>
+      </listitem>
+    </itemizedlist>
+  </section>
+
   <section xml:id="relnotes_changes"><info><title>Feature Changes</title></info>
     <itemizedlist>
       <listitem>