diff --git a/CHANGES b/CHANGES index 7675e64b75..4a6a44d24f 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,7 @@ +6266. [func] The zone option 'inline-signing' is ignored from now + on iff there is no 'dnssec-policy' configured for the + corresponding zone. [GL #4349] + 6265. [bug] Don't schedule resign operations on the raw version of an inline-signing zone. [GL #4350] diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index 6dc098cd47..adeaf5f183 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -43,7 +43,10 @@ Removed Features Feature Changes ~~~~~~~~~~~~~~~ -- None. +- The zone option :any:`inline-signing` is now ignored if there is no + :any:`dnssec-policy` configured for the zone. This means that unsigned + zones will no longer create redundant signed versions of the zone. + :gl:`#4349` Bug Fixes ~~~~~~~~~