From 92f98002e75a1e679e1561dd0c6ae8708bda14f0 Mon Sep 17 00:00:00 2001
From: Matthijs Mekking <matthijs@isc.org>
Date: Mon, 9 May 2022 14:28:45 +0200
Subject: [PATCH] Add CHANGE and release note for #1611

Feature change.
---
 CHANGES                     | 3 +++
 doc/notes/notes-current.rst | 4 +++-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/CHANGES b/CHANGES
index 23c72d1811..8081f2dd5b 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5896.	[func]		Add some more dnssec-policy checks to detect weird
+			policies. [GL #1611]
+
 5895.	[test]		Add new set of unit test macros and move the unit
 			tests under single namespace in /tests/. [GL !6243]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index d22aea1b55..4537e372ea 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -35,7 +35,9 @@ Removed Features
 Feature Changes
 ~~~~~~~~~~~~~~~
 
-- None.
+- Some more ``dnssec-policy`` configuration checks have been added to
+  detect weird policies such as missing KSK and/or ZSK, and too short
+  key lifetimes and re-sign periods. :gl:`#1611`.
 
 Bug Fixes
 ~~~~~~~~~