The structs cannot be compared directly because BSDs use some
extra fields which don't have match. Compare just address and port.

Write DNS cookies in network-order.

See merge request !575

utils/tls: print certificate hierarchy



See merge request !573

Test on big-endian machines have been failing.

Speed: on my office desktop it didn't increase the amount of resources
needed to run all the tests; I actually got a little shorter time,
but that was most likely due to random variations.

NSEC proofs refactoring

Close #191, #471

See merge request !570

NSECs don't exist at non-terminals, NSEC3s don't exist in opt-out.

The real previous name has to be stored because the wildcard
needn't be expanded from QNAME but can be expanded as a part
of CNAME/DNAME chain.

Don't require the node to be authoritative. This is need for DNSSEC
proofs and this should be handled there.

DNS over TLS in kdig



See merge request !569