From 63f194995a20fa2ce5a9050e44e26272d250be8b Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Fri, 18 Feb 2022 13:36:15 +1100 Subject: [PATCH] Add release note for [GL #3142] (cherry picked from commit e48af3698100b2e69971e2cc5fc09ee300bbedc7) --- doc/notes/notes-current.rst | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index 3cff9db120..28f5cb04fb 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -94,3 +94,9 @@ Bug Fixes miscalculated in certain resolution scenarios, potentially causing the value of the counter to drop below zero. This has been fixed. :gl:`#3147` + +- Invalid dnssec-policy definitions were being accepted where the + defined keys did not cover both KSK and ZSK roles for a given + algorithm. This is now checked for and the dnssec-policy is + rejected if both roles are not present for all algorithms in use. + :gl:`#3142`