4840. [test] Add tests to cover fallback to using ZSK on inactive KSK. [RT #46787] (cherry picked from commit 32d09cd7e05f53b227f7a68d7f6e8cc5a3f2b1fb)

4837. [bug] dns_update_signatures{inc} (add_sigs) was not properly determining if there were active KSK and ZSK keys for a algorithm when update-check-ksk is true (default) leaving records unsigned. [RT #46743] (cherry picked from commit 196e01da5fed56b219b7a86b5549450ce05249a7)

update copyright notice / whitespace

[v9_11] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3 4727. [bug] Retransferring an inline-signed slave using NSEC3 around the time its NSEC3 salt was changed could result in an infinite signing loop. [RT #45080] (cherry picked from commit f665c724e4ec7fb48100e808a08788904ddd74b6)

4401. [misc] Change LICENSE to MPL 2.0.

3958. [bug] Detect when writeable files have multiple references in named.conf. [RT #37172]

[master] use posix-compatible shell in system tests 3839. [test] Use only posix-compatible shell in system tests. [RT #35625]

[master] use test -r in system tests 3806. [test] Improved system test portability. [RT #35625]

update copyright notice

[master] testcrypto.sh in system tests 3714. [test] System tests that need to test for cryptography support before running can now use a common "testcrypto.sh" script to do so. [RT #35213]

3642. [func] Allow externally generated DNSKEY to be imported into the DNSKEY management framework. A new tool dnssec-importkey is used to this. [RT #34698]

update copyright notice

3635. [bug] Signatures were not being removed from a zone with only KSK keys for a algorithm. [RT #24439]

reverse bad copyright update

update copyright notice

3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]

update copyright notice

3264. [bug] Automatic regeneration of signatures in an inline-signing zone could stall when the server was restarted. [RT #27344] 3263. [bug] "rndc sync" did not affect the unsigned side of an inline-signing zone. [RT #27337]

3252. [bug] When master zones using inline-signing were updated while the server was offline, the source zone could fall out of sync with the signed copy. They can now resynchronize. [RT #26676]

Backout accident commit to head

ixfr-from-differences backup file

3181. [func] Inline-signing is now supported for master zones. [RT #26224]

3177. [func] 'rndc keydone', remove the indicator record that named has finished signing the zone with the corresponding key. [RT #26206]

3166. [bug] Upgrading a zone to support inline-signing failed. [RT #26014]

update copyright notice

3147. [func] Initial inline signing support. [RT #23657]