The deckard change was probably unintentional, so I reverted that.
The only real mistake I found was `sizeof(128)`, though the effect was
just unnecessary reallocations.

On the whole I really like it.  Verbose logging might get slightly
slower, due to increased amount of string allocation and copying,
but it does seem worth it, at least until we can prove otherwise.
I didn't look much into http module changes, etc.

doc: fix generating sphinx doc using older packages

See merge request !460

Split CLI for managed and unmanaged trust anchor modes

Closes #145 and #168

See merge request !358

Vitezslav Kriz authored 7 years ago and Petr Špaček committed 7 years ago

Config tests now have ability to run daemon with different arguments and
to check exit code.

Vitezslav Kriz authored 7 years ago and Petr Špaček committed 7 years ago

Arguments --keyfile, -k for managed mode
and
--keyfile-ro, -K for unmanaged (readonly) mode.

Automatic setting based on the file permission is removed because it was
confusing and could easily lead to state where automatic update does not
happen because of unexpected file permissions.

Check if folder is writeable was moved into Lua code.

Default unmanaged keyfile path can be specified at compile
time with option KEYFILE_DEFAULT. This default
configuration can be disabled in configuration file with
trust_anchors.keyfile_default = nil.

I'm not sure why the preceding commits broke it.

Readability, and don't -I embedded lmdb if not using it.

Symbols not marked by KR_EXPORT shouldn't be visible outside
the same output binary (e.g. sbin/kresd or lib/kdns_modules/hints.so)
Also mark `engine_hint_root_file`.

Implement draft-ietf-dnsop-kskroll-sentinel-00

Closes #266

See merge request !382

It is enabled by default.

policy: load policy module by default

See merge request !457

RFC 6761 mandates functionality implemented by policy module, so it is
now loaded by default. Users with special needs can still unload the
module.

Anbang Wen authored 7 years ago and Vladimír Čunát committed 7 years ago

Without changing the interface, map_contains is able to tell whether
the item exist in map or not.

Discovered by clang scan.

daemon/worker: worker_process_tcp: cleanup

See merge request !452