Libor Peltan authored 5 years ago and Daniel Salzman committed 5 years ago

the tree is like a key-value database, with the key being a domain name
of a record which is an additional for a record in the zone
while the name might be not in the zone; the value is a list_t
of pointers to zone nodes, for which it actually is an addiitonal

whenever in an incremental update a record is changed/added
with the name of an additional, all the listed nodes
must be re-adjusted (re-discovered additionals

previously, we always re-discovered additionals for whole zone

offline KSK: bugfix: refresh offline RRSIGs

Closes #645

See merge request !1006

Nsec optimi2reb

See merge request !1002

dnssec/nsec_update: trivial optimization

See merge request !1003

Resign optimi

See merge request !1001

...once in remove_expired_rrsigs(), once in add_missing_rrsigs()
this is important because unlike RSASHA, with ECDSA is checking signature far slower than creating one
little side effect: signatures of DNSKEY record by ZSK are always removed

QP-trie NULL callback

See merge request !1000

Implementation of COW trie for zone updates

See merge request !988