There were collisions between types and identifiers causing confusion
for Coccinelle (and probably other tools).

refs #4

Refs #4

Invalid variable was put in the condition.

CID: 1086921

- add API function knot_dnssec_sign_verify()
- works only for RSA based ciphers, format conversion needed for others

refs #4

This is O(N) on both insert/search, but since the ACL lists are
several items long (usually), it is not an issue.
The lists are sorted from the longest prefix to the shortest, so
the first match is guaranteed to be longest prefix match.

Main changes:
* 'system.hostname' config option is deprecated
* 'system.identity' is used for 'id.server' and 'hostname.bind'
* 'system.version' is used for 'version.server' and 'version.bind'
* In addition, config options (and NSID) support boolean on|off
* When on, the automatic default is filled on config load:
  * FQDN hostname (or at least hostname) for NSID and system.identity
  * Version string for system.version

The config options are still turned off by default.
refs #113

refs #100

Refs #102

 + cleanup in lists.c.

 Refs #89

Refs #89

- This is needed to fix a buggy DDNS rollback
- Added mempooled lists instead of dynamic arrays - much less code, no duplications
- Partial changes in usage, but still not compilable

refs #71, #65

The reasons are discussed in #71.
Namely:
- transfers are self-paced, TCP clients are divided among threads
- due to the nature of DNS, most of the connections should be active
- if not, it is probably an attack, long idling connections are disconnected
- even then the performance degradation is not so severe

fixes #71

To do:
* Disabled epoll/kqueue backend as there is something broken for write events

refs #65

This makes most of the use of the MM context apart from
several places, which are to be refactored:
- constructed RRs
- QNAME

refs #22

 - Used for ahtable size estimation
 - Estimate still not precise, but getting close
 - Added malloc wrapper for trie, but allocated sizes are negligible

  Refs #37

It would otherwise clash with TSIG errors, which are required to
be inverted TSIG RCODEs.

It is still possible to control knotd using signals though,
but the 'knotc' will use just the one configured channel not a mix
of signals and channel.

refs #36