lib/dnssec: rewrite most of NSEC validation code

Fixes #443 (closed) and #738 (closed).

added bug label

I like when rewrites can also make things much simpler

6 files changed, 144 insertions(+), 378 deletions(-)

changed milestone to %5.5.1

added 17 commits

• 2aff14b2...370463cd - 11 commits from branch master
• cb77f9eb - daemon/lua nit: sort RR rank names in debug logs
• 9c1ad65f - lib/dnssec: replace kr_nsec_existence_denial()
• 6da74af8 - lib/dnssec: drop kr_nsec_name_error_response_check()
• da1104f6 - lib/dnssec: rewrite kr_nsec_ref_to_unsigned()
• 1ece2cab - lib/dnssec: nits
• ee9bfa66 - NEWS for the rewrite of some NSEC validation parts

Compare with previous version

merged

mentioned in commit 0e7dcec6

mentioned in merge request turris/os/packages!926 (merged)