Description of problem:
Support for RFC 5649 is a requirement for DNSSEC support in FreeIPA.
Patches were sent upstream: http://rt.openssl.org/Ticket/Display.html?id=3434
Support was merged upstream. Please see upstream commit: https://github.com/openssl/openssl/commit/d31fed73e25391cd71a0de488d88724db78f6f8a
Could we delete condNAK: upstream?
If this Feature should be included in the 7.1 Release Notes, could you please change the Doc Type from Enhancement to "Release Note"?
Note that the Release Notes are intended to list the most prominent and customer-relevant new features rather than every single enhancement.
No release note needed.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.