Extract the part of dns_zoneverify_dnssec() responsible for verifying DNSSEC signatures against the DNSKEY RRset at zone apex and checking consistency of NSEC/NSEC3 chains to a separate function.
Extract the part of dns_zoneverify_dnssec() responsible for verifying DNSSEC signatures against the DNSKEY RRset at zone apex and checking consistency of NSEC/NSEC3 chains to a separate function.