From: Matthijs Mekking <matthijs@isc.org>
Date: Mon, 12 Apr 2021 13:57:38 +0000 (+0200)
Subject: Changes and release notes for [#2596]
X-Git-Tag: v9.17.13~14^2~1
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=366ed047ddebf14bffa82f991af9195f7c5eadda;p=thirdparty%2Fbind9.git

Changes and release notes for [#2596]
---

diff --git a/CHANGES b/CHANGES
index 3c752cc442b..2d214f7d915 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5634.	[bug]		Don't roll keys when the private key file is offline.
+			[GL #2596]
+
 5633.	[doc]		Inline-signing was incorrectly described as being
 			inherited from the options / view levels and was
 			incorrectly accepted at those levels without effect.
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index b9b48a46c48..aa3cdde8924 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -82,3 +82,6 @@ Bug Fixes
   between the new keys too. :gl:`#2628`
 
 - Update ZONEMD to match RFC 8976. :gl:`#2658`
+
+- With ``dnssec-policy```, don't roll keys if the private key file is offline.
+  :gl:`#2596`