From e48af3698100b2e69971e2cc5fc09ee300bbedc7 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Fri, 18 Feb 2022 13:36:15 +1100 Subject: [PATCH] Add release note for [GL #3142] --- doc/notes/notes-current.rst | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index 864101ae26..1bb691f6c5 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -100,3 +100,9 @@ Bug Fixes miscalculated in certain resolution scenarios, potentially causing the value of the counter to drop below zero. This has been fixed. :gl:`#3147` + +- Invalid dnssec-policy definitions were being accepted where the + defined keys did not cover both KSK and ZSK roles for a given + algorithm. This is now checked for and the dnssec-policy is + rejected if both roles are not present for all algorithms in use. + :gl:`#3142`