b493c8505e
For inline-signing zones, sometimes kasp was not detected because the function was called on the raw (unsigned) version of the zone, but the kasp is only set on the secure (signed) version of the zone. Fix the dns_zone_getkasp() function to check whether the zone structure is inline_raw(), and if so, use the kasp from the secure version. In zone.c we can access the kasp pointer directly.