Merged rt46864 (check MD5 amd SHA1 support)

add missing symbols

4804. [port] win32: access() does not work on directories as required by POSIX. Supply a alternative in isc_file_isdirwritable. [RT #46394]

[v9_11] add missing names

Don't use memset() to wipe memory (#45947) (cherry picked from commit d5707676e45551d1ceb600a674f3f13351fd3105)

[v9_11] give threads unique names to assist debugging 4602. [func] Threads are now set to human-readable names to assist debugging, when supported by the OS. [RT #43234] (cherry picked from commit d26ae7fc0802f67a50f6f01152f356182d47305e)

4461. [bug] win32: not all external data was properly marked as external data for windows dll. [RT #43161] (cherry picked from commit 8eceb0bffe4ab4ccf72f71bb69d2b8106743af5d)

add isc_lex_setsourceline

[v9_11] Merged rt43076 (log PKCS#11 provider load failure) (cherry picked from commit 2f08617da9a3d8dc59dbf802d7a0bca4028892cb)

4450. [port] Provide more nuanced HSM support which better matches the specific PKCS11 providers capabilities. [RT #42458] (cherry picked from commit 8ee6f289d87851a5b898b24a64587f0e6bc225bc)

add isc_ratelimiter_setpushpop (cherry picked from commit d260d5ef4ca9f5db4ec2fc50a616cd96365edf7a)

[v9_11] rndc dnstap -roll 4411. [func] "rndc dnstap -roll" automatically rolls the dnstap output file; the previous version is saved with ".0" suffix, and earlier versions with ".1" and so on. An optional numeric argument indicates how many prior files to save. [RT #42830]

add isc_buffer_dup and isc_buffer_putdecint

[master] remove isc_ht_walk from libisc.def

add isc_ht_iter_currentkey and isc_ht_iter_delcurrent_next

add isc_sha224_data, isc_sha224_end, v isc_sha384_end, isc_sha512_data and isc_sha512_end

Fixed WIN32 (VS 2010 32 bits) compiling problems

[master] copyrights, win32 definitions

4376. [experimental] Added support for Catalog Zones, a new method for provisioning secondary servers in which a list of zones to be served is stored in a DNS zone and can be propagated to slaves via AXFR/IXFR. [RT #41581] 4375. [func] Add support for automatic reallocation of isc_buffer to isc_buffer_put* functions. [RT #42394]

add isc_httpd_setfinishhook

Add missing win32 defs

[master] millisecond granularity for statschannel timers 4290. [func] The timers returned by the statistics channel (indicating current time, server boot time, and most recent reconfiguration time) are now reported with millisecond accuracy. [RT #40082]

Updated WIN32 files (rt40877)

Improve performance of RBT (#41165)

Merged VS 2015 64 bit warnings (#40373)

4238. [bug] Don't send to servers on net zero (0.0.0.0/8). [RT #40947]

[master] dnstap 4235. [func] Added support in named for "dnstap", a fast method of capturing and logging DNS traffic, and a new command "dnstap-read" to read a dnstap log file. Use "configure --enable-dnstap" to enable this feature (note that this requires libprotobuf-c and libfstrm). See the ARM for configuration details. Thanks to Robert Edmonds of Farsight Security. [RT #40211]

[master] merge dyndb 4224. [func] Added support for "dyndb", a new interface for loading zone data from an external database, developed by Red Hat for the FreeIPA project. DynDB drivers fully implement the BIND database API, and are capable of significantly better performance and functionality than DLZ drivers, while taking advantage of advanced database features not available in BIND such as multi-master replication. Thanks to Adam Tkac and Petr Spacek of Red Hat. [RT #35271]

Fixed project files

add isc_safe_memequal and isc_safe_memcompare; remove isc_safe_memcmp

[master] add "rndc -r" to print result code 4115. [func] "rndc -r" now prints the result code (e.g., ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after running the requested command. [RT #38913]

Fix a segfault when running nslookup (#38548)

[master] report library version numbers on win32

[master] restored accidentally removed externals

[master] allow shared TCP sockets when connecting 4041. [func] TCP sockets can now be shared while connecting. (This will be used to enable client-side support of pipelined queries.) [RT #38231]

[master] more windows VS14 compatibility work (completes change #3987)

[master] more missing entry points

[master] typos

[master] add more missing entry points

win32 build

[master] refactor max-recursion-queries - the counters weren't set correctly when fetches timed out. instead we now pass down a counter object.

[master] allow arbitrary-size rndc output 4005. [func] The buffer used for returning text from rndc commands is now dynamically resizable, allowing arbitrarily large amounts of text to be sent back to the client. (Prior to this change, it was possible for the output of "rndc tsig-list" to be truncated.) [RT #37731]

[master] new mkeys and nzf naming format 3999. [func] "mkeys" and "nzf" files are now named after their corresponding views, unless the view name contains characters that would be incompatible with use in a filename (i.e., slash, backslash, or capital letters). If a view name does contain these characters, the files will still be named using a cryptographic hash of the view name. Regardless of this, if a file using the old name format is found to exist, it will continue to be used. [RT #37704]

3956. [func] Notify messages are now rate limited by notify-rate and startup-notify-rate instead of serial-query-rate. [RT #24454] 3955. [bug] Notify messages due to changes are no longer queued behind startup notify messages. [RT #24454]

[master] unresolved externals

[master] better error output when initializing pkcs11 3786. [func] Provide more detailed error codes when using native PKCS#11. "pkcs11-tokens" now fails robustly rather than asserting when run against an HSM with an incomplete PCKS#11 API implementation. [RT #35479]

[master] merge several interdependent fixes 3760. [bug] Improve SIT with native PKCS#11 and on Windows. [RT #35433] 3759. [port] Enable delve on Windows. [RT #35441] 3758. [port] Enable export library APIs on windows. [RT #35382]

[master] merge libiscpk11 to libisc 3735. [cleanup] Merged the libiscpk11 library into libisc to simplify dependencies. [RT #35205]

[master] deprecate isc_bitsrting 3727. [func] The isc_bitstring API is no longer used and has been removed from libisc. [RT #35284]

[master] portable strptime/timegm 3709. [port] Use built-in versions of strptime() and timegm() on all platforms to avoid portability issues. [RT #35183]

[master] native PKCS#11 support 3705. [func] "configure --enable-native-pkcs11" enables BIND to use the PKCS#11 API for all cryptographic functions, so that it can drive a hardware service module directly without the need to use a modified OpenSSL as intermediary (so long as the HSM's vendor provides a complete-enough implementation of the PKCS#11 interface). This has been tested successfully with the Thales nShield HSM and with SoftHSMv2 from the OpenDNSSEC project. [RT #29031]

[master] fix win32 build problems

[master] add isc_string_strcasestr for portability

3681. [port] Update the Windows build system to support feature selection and WIN64 builds. This is a work in progress. [RT #34160]