4401. [misc] Change LICENSE to MPL 2.0.
update copyrights
[master] native PKCS#11 support 3705. [func] "configure --enable-native-pkcs11" enables BIND to use the PKCS#11 API for all cryptographic functions, so that it can drive a hardware service module directly without the need to use a modified OpenSSL as intermediary (so long as the HSM's vendor provides a complete-enough implementation of the PKCS#11 interface). This has been tested successfully with the Thales nShield HSM and with SoftHSMv2 from the OpenDNSSEC project. [RT #29031]
3387. [func] Support for a DS digest can be disabled at runtime with disable-ds-digests. [RT #21581]
3354. [func] Improve OpenSSL error logging. [RT #29932]
update copyright notice
3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
2999. [func] Add GOST support (RFC 5933). [RT #20639]
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1851. [doc] Doxygen comment markup. [RT #11398]
1819. [bug] The validator needed to check both the algorithm and digest types of the DS to determine if it could be used to introduce a secure zone. [RT #13593]
1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
1328. [func] DS (delegation signer) support.