Josh Soref authored 3 years ago and Daniel Salzman committed 3 years ago

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago

... this removes the need for equal configuration of offline ksk sides

This reverts commit 29decc3e.

...in case the zone had been XFRed before, the master serial
was not stored and after local signing, it was doomed

...in case of concurrency, it might lead to server crash on startup
this way, catalogDB is only opened from main thread in advance

Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago

previously, adding RRSIG to the signed node confused
iteration over RRSets, leading to duplicit RRSIGs
of some NSEC(3)s

...also checking DS-TTL delay after submission

Returning KNOT_ENOTSUP makes more sense than returning KNOT_EMALF in such situations.

The test no longer works, as concurrent backups aren't possible in
Knot any more.