without DNSSEC validation. [RT #20737]
9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
Additional notes specific to 9.4-ESV:
- I needed to explicitly enable dnssec-validation in "pending" system tests
because it's disabled by default for 9.4. This is not a problem of this
patch - the test was broken for 9.4 when it was first introduced. Another
reason why we need more detailed tests.
- I modified the test case for 9.4 so that it allows pending-additional-to-answer
promotion as 9.4 doesn't include this bug fix.