From: Matthijs Mekking <matthijs@isc.org>
Date: Fri, 25 Jun 2021 09:43:29 +0000 (+0200)
Subject: Add change and release note for [#1126]
X-Git-Tag: v9.17.16~8^2~1
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=22cd63bf811fea683bc86e84b7649ce679d53122;p=thirdparty%2Fbind9.git

Add change and release note for [#1126]

Seems pretty newsworthy.
---

diff --git a/CHANGES b/CHANGES
index 72c9a9b44ad..316b029606b 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5669.	[func]		Add 'checkds' feature. Zones with "dnssec-policy" and
+			"parental-agents" configured will check for DS presence
+			and are able to perform automatic KSK rollover.
+			[GL #1126]
+
 5668.	[bug]		When a zone fails to load on startup, the setnsec3param
 			task is rescheduled. This caused a hang on shutdown, and
 			is now fixed. [GL #2791]
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index ddeb2d7fd76..0e92cda1b14 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -28,7 +28,9 @@ Known Issues
 New Features
 ~~~~~~~~~~~~
 
-- None.
+- Automatic KSK rollover: A new configuration option ``parental-agents`` is
+  added to add a list of servers to a zone that can be used for checking DS
+  presence. :gl:`#1126`
 
 Removed Features
 ~~~~~~~~~~~~~~~~