update copyright notice / whitespace
4748. [cleanup] Sprintf to snprintf coversions. [RT #46132] (cherry picked from commit a009d03a1abf73c8146c1696ce1100e62c3b9dbb)
4401. [misc] Change LICENSE to MPL 2.0.
4199. [protocol] Add support for NINFO, RKEY, TA. [RT #40545] [RT #40547] [RT #40563]
Use mnemonics for RR class and type comparisons (#40297)
update copyrights
[master] native PKCS#11 support 3705. [func] "configure --enable-native-pkcs11" enables BIND to use the PKCS#11 API for all cryptographic functions, so that it can drive a hardware service module directly without the need to use a modified OpenSSL as intermediary (so long as the HSM's vendor provides a complete-enough implementation of the PKCS#11 interface). This has been tested successfully with the Thales nShield HSM and with SoftHSMv2 from the OpenDNSSEC project. [RT #29031]
update copyright notice
3629. [func] Allow the printing of cryptographic fields in DNSSEC records by dig to be suppressed (dig +nocrypto). [RT #34534]
3387. [func] Support for a DS digest can be disabled at runtime with disable-ds-digests. [RT #21581]
3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
set $Id$
3062. [func] Made several changes to enhance human readability of DNSSEC data in dig output and in generated zone files: - DNSKEY record comments are more verbose, no longer used in multiline mode only - multiline RRSIG records reformatted - multiline output mode for NSEC3PARAM records - "dig +norrcomments" suppresses DNSKEY comments - "dig +split=X" breaks hex/base64 records into fields of width X; "dig +nosplit" disables this. [RT #22820]
2999. [func] Add GOST support (RFC 5933). [RT #20639]
2801. [func] Detect and report records that are different according to DNSSEC but are sematically equal according to plain DNS. Apply plain DNS comparisons rather than DNSSEC comparisons when processing UPDATE requests. dnssec-signzone now removes such semantically duplicate records prior to signing the RRset. named-checkzone -r {ignore|warn|fail} (default warn) named-compilezone -r {ignore|warn|fail} (default warn) named.conf: check-dup-records {ignore|warn|fail};
2145. [bug] Check DS/DLV digest lengths for known digests. [RT #16622]
1914. [protocol] DS is required to accept mnemonic algorithms (RFC 4034). Still emit numeric algorithms for compatability with RFC 3658. [RT #15354]
pullup silence compiler fixes ifconfig.sh for Solaris 9 README updates
1586. [func] "check-names" is now implemented.
1409. [bug] DS should have attibute DNS_RDATATYPEATTR_DNSSEC.
casts required
1328. [func] DS (delegation signer) support.