From 85de18f2318c7c4ae3d429ac30ced193787dc069 Mon Sep 17 00:00:00 2001
From: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Date: Tue, 15 Aug 2017 16:17:42 -0400
Subject: [PATCH] changelog++

---
 CHANGELOG.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ebd23846f45c..0ed5645b4cb0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,13 @@ DEPRECATIONS/CHANGES:
    you want to recreate the root, first run a delete operation on `pki/root`
    (requires `sudo` capability), then generate it again.
 
+FEATURES:
+
+ * **Permitted DNS Domains Support in PKI**: The `pki` backend now supports
+   specifying permitted DNS domains for CA certificates, allowing you to
+   narrowly scope the set of domains for which a CA can issue or sign child
+   certificates.
+
 IMPROVEMENTS:
 
  * auth/approle: Allow array input for policies in addition to comma-delimited