From: Matthijs Mekking <matthijs@isc.org>
Date: Wed, 24 Feb 2021 09:23:14 +0000 (+0100)
Subject: Add changes and notes for [#2498]
X-Git-Tag: v9.17.11~25^2
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=89c47b3b42c30fecdc515bee1dfbd954f29aeec0;p=thirdparty%2Fbind9.git

Add changes and notes for [#2498]
---

diff --git a/CHANGES b/CHANGES
index d87e86a96de..c88380912f4 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5590.	[bug]		Process NSEC3PARAM queue when loading a dynamic zone.
+			This will immediately create NSEC3 records for zones
+			that use "dnssec-policy" and "nsec3param". [GL #2498]
+
 5589.	[placeholder]
 
 5588.	[func]		Add "purge-keys" option to "dnssec-policy". This sets
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index c08c6f6954b..54733d22c37 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -54,5 +54,8 @@ Bug Fixes
   UDP sockets that we enabled during the DNS Flag Day 2020 to fix this issue.
   [GL #2487]
 
+- NSEC3 records were not immediately created when signing a dynamic zone with
+  ``dnssec-policy`` and ``nsec3param``. This has been fixed [GL #2498].
+
 - An invalid direction field (not one of 'N'/'S' or 'E'/'W') in a LOC record
   triggered an INSIST failure. [GL #2499]