DNSSEC validation: don't require configured policy

See merge request !1170

Currently used for the "zone-flush" action only.
Note: an error code for this purpose is to be created when reordering error codes in libknot.

Tests extra updates 04

See merge request !1169

Properly test for zone apex's name.
Also, improve readability of the code by using symbolic name for a record owner.

distro/tests: fix file permissions set by ansible

See merge request !1167

Ansible switched default file perm to 600 from more permissive 666.
Add file mode explicitly to avoid issues.

David Vasek authored 4 years ago and Daniel Salzman committed 4 years ago

The initialization is needed for localtime_r(3) libc function to work reliably on all platforms.

sem check: skip crypto if keytag mismatch

Closes #688

See merge request knot/knot-dns!1166

catalog: add catalog-role option to distinguish 'generate' and 'member' roles in the future

See merge request knot/knot-dns!1165

tests-extra: compatibility with new Bind9-utils and Python 3.8

See merge request knot/knot-dns!1123

doc: additional hints for Offline KSK operation

See merge request knot/knot-dns!1162

server: mute Valgrind error "Syscall param socketcall.setsockopt(optval) points to uninitialised byte(s)", code cleanup