From: Mark Andrews <marka@isc.org>
Date: Fri, 18 Feb 2022 02:36:15 +0000 (+1100)
Subject: Add release note for [GL #3142]
X-Git-Tag: v9.19.0~79^2
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=e48af3698100b2e69971e2cc5fc09ee300bbedc7;p=thirdparty%2Fbind9.git

Add release note for [GL #3142]
---

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 864101ae26a..1bb691f6c50 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -100,3 +100,9 @@ Bug Fixes
   miscalculated in certain resolution scenarios, potentially causing the
   value of the counter to drop below zero. This has been fixed.
   :gl:`#3147`
+
+- Invalid dnssec-policy definitions were being accepted where the
+  defined keys did not cover both KSK and ZSK roles for a given
+  algorithm.  This is now checked for and the dnssec-policy is
+  rejected if both roles are not present for all algorithms in use.
+  :gl:`#3142`