DNSSEC: fix possible writing of invalid DSA signature

Values R and S from DSA signatures could be probably shorter than 20 bytes.
In that case, some bytes of the memory with signature would be left untouched
by the write function.

Added memset() should fix that.