although it's suboptimal - since the control message doesn't have a key
name, it just tries each key until it finds one that successfully decodes
the message.
removes no longer configured listeners into the block that actually
updates/add listeners, because when ns_controls_configure() recursively
calls itself to configure a 127.1 channel if there is no controls() statement,
the top level ns_controls_configure() was shutting down the channel that
the enclosing ns_controls_configure() just created.
required good entropy only when 'param' (to dst_key_generate) was non-zero.
Since the default was always to require good entropy, that default behavior
has been restored and now a non-zero param means that pseudorandom is ok.
no controls statement is present or when an inet statement is missing
a keys clause.
Dump an rndc.conf-style configuration into a file
(NS_LOCALSTATEDIR "named.key") with the key and suitable default-* values.
because the code was incorrectly referencing the secret from memory that
the reload frees. The code now makes a copy of the secret used to validate
the request, and uses that in the response.
Brian Wellington