1dd11fc754
dnssec-signzone should sign a zonefile that contains a DNSKEY record with an unsupported algorithm. Current behavior is that it will fail, hitting a fatal error. The fix detects unsupported algorithms and will not try to add it to the keylist. Also when determining the maximum iterations for NSEC3, don't take into account DNSKEY records in the zonefile with an unsupported algorithm.