Libor Peltan authored 7 years ago and Daniel Salzman committed 7 years ago

NSEC is always signed
if AA flag is missing, we expect it is a delegation and skip signing NS etc
glues are signed iff they come from non-NOTAUTH nodes

axfr: fix force_axfr for multi-master setup

See merge request !874

Jan Včelák authored 7 years ago and Daniel Salzman committed 7 years ago

An upper-case letter byte would break the minimal proof after lower casing
if there is no room for another label in the dname.

Still there are some problems with clang on 32-bit systems, so the atomic
functionality is no longer required for such systems (statistics or mod-cookies
might work slightly wrong).

kdig: polling on TLS connections

See merge request !875

kdig: add support for +ednsopt

See merge request !873