Add recursor 4.0.0 beta 1 changelog

diff --git a/docs/markdown/changelog.raw.md b/docs/markdown/changelog.raw.md
index 0ee902620ed19eedad56cb1a655dde9a61f477e5..645fd5154cfe73d6cb0863dda123bc93b2dba8a6 100644 (file)
--- a/docs/markdown/changelog.raw.md
+++ b/docs/markdown/changelog.raw.md
@@ -15,7 +15,7 @@ Changes since 3.4.8:
 - [commit 7473a5e](https://github.com/PowerDNS/pdns/commit/7473a5e): bindbackend: fix, set domain in list() (Kees Monshouwer)
 
 # PowerDNS Recursor 4.0.0
-UNRELEASED - trial packages on [our builder](https://builder.powerdns.com) and on [our repositories](https://repo.powerdns.com).
+UNRELEASED - trial packages on [our repositories](https://repo.powerdns.com).
 
 PowerDNS Recursor 4.0.0 is part of [the great 4.x "Spring Cleaning"](http://blog.powerdns.com/2015/11/28/powerdns-spring-cleaning/) of PowerDNS which lasted through the end of 2015.
 
@@ -34,7 +34,7 @@ In addition to this cleanup, which has many internal benefits and solves longsta
 - RPZ aka Response Policy Zone support
 - IXFR slaving in the PowerDNS Recursor for RPZ
 - DNSSEC processing in Recursor (Authoritative has had this for years)
-- DNSSEC validation
+- DNSSEC validation (without NSEC(3) proof validation)
 - EDNS Client Subnet support in PowerDNS Recursor (Authoritative has had this for years)
 - Lua asynchronous queries for per-IP/per-domain status
 - Caches that can now be wiped per whole zone instead of per name
@@ -44,9 +44,22 @@ In addition to this cleanup, which has many internal benefits and solves longsta
 
 Please be aware that beyond the items listed here, there have been heaps of tiny changes. As always, please carefully test a new release before deploying it.
 
-As of alpha3, we are aware of the following brokenness:
+## PowerDNS Recursor 4.0.0-beta1
+Unreleased
 
-- The validator misjudges the DNSSEC status of some domains. Please report such errors if you find them.
+This release fixes a bug in the DNSSEC implementation where a name would we validated as bogus when talking to non-compliant authoritative servers:
+
+- [#3875](https://github.com/PowerDNS/pdns/pull/3875) Disable DNSSEC for domain where the auth responds with FORMERR or NOTIMP
+
+## Improvements
+
+- [#3866](https://github.com/PowerDNS/pdns/pull/3866) Increase max FDs in systemd unit file
+- [#3905](https://github.com/PowerDNS/pdns/pull/3905) Add a dnssec=process-no-validate option and make it default
+
+## Bug fixes
+
+- [#3881](https://github.com/PowerDNS/pdns/pull/3881) Fix the `noEdnsOutQueries` counter
+- [#3892](https://github.com/PowerDNS/pdns/pull/3892) support `clock_gettime` for platforms that require -lrt
 
 ## PowerDNS Recursor 4.0.0-alpha3
 Released May 10th 2016