Set default journal-max-depth to 20

See merge request !1376

journal: don't skip merge to zone-in-journal in case of recent md->flushed_upto...

See merge request !1377

in case of zone-in-journal, it might happen that md->flushed upto is set
by zonefile sync or by extra changeset
however, presence of zone-in-journal requires that those changes are
merged into it anyway
which was blocked by direct check

kdig: Add ALPN to TLS (DoT) connect

See merge request !1375

scripts: add make-obs.sh to create OBS srcpkg

See merge request !1374

This is a lightly modified script from Knot Resolver
which uses apkg to render OBS source package files
in pkg/obs.

distro/test: update CA certificates for CentOS

See merge request !1369

Little fixes

See merge request !1372

dnssec (offlineKSK): RRSIG validation does not count with rrsig-refresh...

See merge request !1371

Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago

... this removes the need for equal configuration of offline ksk sides

On CentOS 7, the base image has an outdated LetsEncrypt certificate.

zone: refactoring: zone_t points to server_t

See merge request !1367

nameserver: dont put additionals induced by additionals

See merge request !1368

svcb: put glue + dnssec into additional section

See merge request !1366