3736. [bug] nsupdate: When specifying a server by name,
fall back to alternate addresses if the first
address for that name is not reachable. [RT #25784]
(cherry picked from commit 842a3e6d0e)
(cherry picked from commit 1a58baf293)
3731. [func] Added a "no-case-compress" ACL, which causes
named to use case-insensitive compression
(disabling change #3645) for specified
clients. (This is useful when dealing
with broken client implementations that
use case-sensitive name comparisons,
rejecting responses that fail to match the
capitalization of the query that was sent.)
[RT #35300]
(cherry picked from commit 166341d554)
(cherry picked from commit c2d3d0eda5)
3730. [cleanup] Added "never" as a synonym for "none" when
configuring key event dates in the dnssec tools.
[RT #35277]
3729. [bug] dnssec-kegeyn could set the publication date
incorrectly when only the activation date was
specified on the command line. [RT #35278]
(cherry picked from commit 5f06c523186be56c5b0cd9b1c230ea7a53960c53)
(cherry picked from commit ec146546f4)
3698. [cleanup] Replaced all uses of memcpy() with memmove().
[RT #35120]
(cherry picked from commit ebe54c7d2221c6a0a4b3d96bcae3280c823a45e6)
(cherry picked from commit 9b950c70f1a6406c0f3dff604822329d06fc4837)
3694. [bug] Warn when a key-directory is configured for a zone,
but does not exist or is not a directory. [RT #35109]
(cherry picked from commit c14ba71070)
(cherry picked from commit 2354181226)
ranges resulting in malformed names being generated
on some platforms. This could cause INSIST failures
when serving NSEC3 signed zones. [RT #35120]
(cherry picked from commit fa467e60c5)
3689. [bug] Fixed a bug causing an insecure delegation from one
static-stub zone to another to fail with a broken
trust chain. [RT #35081]
(cherry picked from commit 9b895f30f1)
(cherry picked from commit 0c0ce5f9a4)
