refs #4

Fixed leaks from load signing. Other cases must be checked.

refs #4

- Added new field to dnssec policy structure (SOA serial increment
  policy)
- Removed debug code
- Added some info messages after succcesful signing

Refs #4

Refs #4

- preparation for non-forced zone sing planning
- added a posibility not to wait for readers in changeset application when applying DNSSEC changes upon load/reload (there should be no readers, since the zone is not in the zonedb)
- fixes in changeset merging (SOAs and serials were wrong - SOAs might still be wrong, when me merge the changesets, we do *NOT* want to update the serial, since the user already did that)

Refs #4

Refs #4

- First store merge changesets, then apply signatures
- Added pretty print function to dump changesets, HAS TO BE REMOVED!!!
- some fixes, mainly in signature checking
- fails to save to journal for same reason
- deliberate leaks - malformed changesets, needs custom freeing function

Refs #4

- Zones are now automatically (re)signed when server starts/reloads
- Signature validity check now calculates the signature as well - this is used to detect changes to RRs themselves
- 'knotc signzone' issues a force signing of zone - all RRSIGs are dropped and recreated
- Some leaks and bugs still present, but the code is commitable now

Refs #4

Refs #4

refs #4

It should be called always when adjusting is called (i.e. always
when new zone contents are created).

refs #4

refs #4

Dnames must be copied now.

refs #4

- Refactored node walking a bit (API instead of hard-coded trie walk)
- Double free fix (wrong merge probably)

Refs #4

- Simplified the RRSet signing function a bit (not so many args needed)

Refs #4

Conflicts:
	src/knot/zone/semantic-check.c
	src/libknot/dname.c
	src/libknot/dname.h
	src/libknot/dnssec/key.c
	src/libknot/rrset.c
	src/libknot/rrset.h
	src/libknot/zone/zone-contents.c
	src/tests/libknot/sign_tests.c
	src/utils/common/params.c

refs #4

Conflicts:
	src/knot/conf/cf-parse.y

refs #4

This is O(N) on both insert/search, but since the ACL lists are
several items long (usually), it is not an issue.
The lists are sorted from the longest prefix to the shortest, so
the first match is guaranteed to be longest prefix match.

Fixed a bug where NSID couldn't be switched off on reload, causing
malformed packets and/or extra bytes.
Since it's protected by RCU, it needs to be created on each server
reload and the old one should be freed after the RCU is synchronized.
Also removed rest of obsolete code and unified EDNS constants.

Not fixed as it should not be problem later with dnames directly
in RDATA (branch dname_refactor). Added note describing the problem.

Also updated documentation for functions where it was wrong.

refs #103, #4

Conflicts:
	src/Makefile.am
	src/knot/conf/conf.c
	src/libknot/dnssec/key.c
	src/libknot/updates/changesets.c
	src/libknot/zone/zone-contents.c
	src/libknot/zone/zone-diff.c