Implement draft-ietf-dnsop-kskroll-sentinel-01

See merge request !497

I got confused by the original text in
draft-ietf-dnsop-kskroll-sentinel-00 and inverted meaning of is/not
sentinel queries.

Version 01 uses names incompatible with version 00.

ci: Dockerfile.debian - add newer git

See merge request !496

git<=2.11 has issues with 'ls-files --recurse-submodules' command
which is used to generate upstream tarball

policy.TLS_FORWARD: fix a bug, add test + NEWS

Closes #306

See merge request !492

Vladimír Čunát authored 7 years ago and Petr Špaček committed 7 years ago

Fixes https://gitlab.labs.nic.cz/knot/knot-resolver/issues/306

update CI

See merge request !494

I messed this up in 44c2ea6b !465.

Closes #284

This changes more time than anticipated, as the old naming didn't apply
anymore (time of last cache clear).

Fedora symbols again

See merge request !491

Vladimír Čunát authored 7 years ago and Tomas Krizek committed 7 years ago

- their `cc --version` doesn't start with "gcc"
- modifying CFLAGS at this point doesn't work,
  so we modify BUILD_CFLAGS instead (_vomit_)

refactoring of the tls data sending scheme

See merge request !489

nitpicks, see commits

See merge request !480

It had no implementation for years - since 456e5446.

(cherry picked from commit 59126a77)
The commit was apparently "reverted" unintentionally when resolving
conflicts in a5b14c25.

- no need to have gitter twice
- update information about modules (one cache, no alternative backends)
- add EPEL 7
- add mailing-list
- link to stable docs instead of latest master

Detected by clang as dead store.

Just loading the module without option was printing that it expected
number of milliseconds, which could've been confusing.

This happens e.g. after cache.clear(), and currently one can stay
long-term without that record in cache.  That was effectively disabling
aggressive answers from the root zone.

This needs disabling a buggy part of Deckard test.

It mostly worked, just by accident.
I see no use for negative initialization in this case.

There's no real effect, probably.

Symlinks are pointing to broken locations with the way we generate
source tarballs. Dereference them to avoid this issue.

Daniel Kahn Gillmor authored 7 years ago and Vladimír Čunát committed 7 years ago

"man man" says that the sections are:

       1   Executable programs or shell commands
       2   System calls (functions provided by the kernel)
       3   Library calls (functions within program libraries)
       4   Special files (usually found in /dev)
       5   File formats and conventions eg /etc/passwd
       6   Games
       7   Miscellaneous  (including  macro  packages  and  conventions), e.g.
           man(7), groff(7)
       8   System administration commands (usually only for root)
       9   Kernel routines [Non standard]

Since there is no command named kresd.system it does not belong in
section 8.

Section 7 includes conventions and useful patterns like gitcli(7),
which seems more similar to the documentation that is supplied in
kresd.systemd.