diff --git a/CHANGES b/CHANGES index b32e4583ef..c7ac667f5b 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,6 @@ +6012. [bug] Fix inline-signing bugs related to the multisigner + model (RFC 8901). [GL #2710] + 6011. [func] Refactor the privilege setting part of named_os unit to make libcap on Linux mandatory and use setreuid and setregid if available. [GL #3583] diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index 36b1a877fb..4230d8d2d1 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -63,3 +63,8 @@ Bug Fixes enter into a state where it would not recover without stopping ``named``, manually deleting ``managed-keys.bind`` and ``managed-keys.bind.jnl`` files, and starting ``named`` again. :gl:`#2895` + +- Fix bugs related to ``inline-signing`` zones that are subject to a + multisigner model (RFC 8901). In some cases it was not possible to update + the zone with a DNSKEY, CDS or CDNSKEY from the other provider, or the + record would be removed again after a re-sign of the zone. :gl:`#2710`