Added Ed25519 support (#44696)

update copyright notice / whitespace

[v9_11] fix RSA parsing when md5 disabled 4645. [bug] Fix PKCS#11 RSA parsing when MD5 is disabled. [RT #45300] (cherry picked from commit b05b3fab3c37c9c07321f01b745719307c84aa2f)

4487. [test] Make system tests work on Windows. [RT #42931]

4450. [port] Provide more nuanced HSM support which better matches the specific PKCS11 providers capabilities. [RT #42458] (cherry picked from commit 8ee6f289d87851a5b898b24a64587f0e6bc225bc)

4401. [misc] Change LICENSE to MPL 2.0.

4252. [func] Add support for automating the generation CDS and CDNSKEY rrsets to named and dnssec-signzone. [RT #40424]

added print.h includes, updated copyrights

update copyrights

[master] native PKCS#11 support 3705. [func] "configure --enable-native-pkcs11" enables BIND to use the PKCS#11 API for all cryptographic functions, so that it can drive a hardware service module directly without the need to use a modified OpenSSL as intermediary (so long as the HSM's vendor provides a complete-enough implementation of the PKCS#11 interface). This has been tested successfully with the Thales nShield HSM and with SoftHSMv2 from the OpenDNSSEC project. [RT #29031]

update copyright notice

remove accidentally added line

3642. [func] Allow externally generated DNSKEY to be imported into the DNSKEY management framework. A new tool dnssec-importkey is used to this. [RT #34698]

cast mode to unsigned int for fprintf

missed out a variable declaration

Conflicts: lib/dns/dst_parse.c lib/isc/win32/file.c

fix check_data() usage 3328. [bug] Fixed inconsistent data checking in dst_parse.c. [RT #29401]

update copyright notice

3317. [func] Add ECDSA support (RFC 6605). [RT #21918]

update copyright notice

3143. [bug] Silence clang compiler warnings. [RT #25174]

2999. [func] Add GOST support (RFC 5933). [RT #20639]

Prevent Linux spurious warnings about fwrite(). [RT #20812]

update copyright notice

2835. [bug] Key inactivity dates were inadvertently stored in the private key file with the outdated tag "Unpublish" rather than "Inactive". This has been fixed; however, any existing keys that had Inactive dates set will now need to have them reset, using 'dnssec-settime -I'. [RT #20868]

2731. [func] Additional work on change 2709. The key parser will now ignore unrecognized fields when the minor version number of the private key format has been increased. It will reject any key with the major version number increased. [RT #20310]

2726. [func] Added support for SHA-2 DNSSEC algorithms, RSASHA256 and RSASHA512. [RT #20023]

2709. [func] Added some data fields, currently unused, to the private key file format, to allow implementation of explicit key rollover in a future release without impairing backward or forward compatibility. [RT #20310]

2668. [func] Several improvements to dnssec-* tools, including: - dnssec-keygen and dnssec-settime can now set key metadata fields 0 (to unset a value, use "none") - dnssec-revoke sets the revocation date in addition to the revoke bit - dnssec-settime can now print individual metadata fields instead of always printing all of them, and can print them in unix epoch time format for use by scripts [RT #19942]

update copyright notice

2636. [func] Simplify zone signing and key maintenance with the dnssec-* tools. Major changes: - all dnssec-* tools now take a -K option to specify a directory in which key files will be stored - DNSSEC can now store metadata indicating when they are scheduled to be published, acttivated, revoked or removed; these values can be set by dnssec-keygen or overwritten by the new dnssec-settime command - dnssec-signzone -S (for "smart") option reads key metadata and uses it to determine automatically which keys to publish to the zone, use for signing, revoke, or remove from the zone [RT #19816]

2612. [func] Add default values for the arguments to dnssec-keygen. Without arguments, it will now generate a 1024-bit RSASHA1 zone-signing key, or with the -f KSK option, a 2048-bit RSASHA1 key-signing key. [RT #19300] 2611. [func] Add -l option to dnssec-dsfromkey to generate DLV records instead of DS records. [RT #19300]

update copyright notice

2567. [bug] dst__privstruct_writefile() could miss write errors. write_public_key() could miss write errors. dnssec-dsfromkey could miss write errors. [RT #19360]

update copyright notice

add EVP and PKCS11

update copyright notice

2313. [cleanup] Silence Coverity warnings. Handle private stacks. [RT #17447] [RT #17478]

update copyright notice

update copyright notice

update copyright notice

fix comment

2018. [bug] Checking if the HMAC MD5 private file was broken. [RT #15960]

update copyright notice

1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]

update copyright notice

1851. [doc] Doxygen comment markup. [RT #11398]