Be lenient when a NSEC NameError response with RCODE=NXDOMAIN is received.
This is okay according 4035, but not after revising existence in 4592. 
NSEC empty non-terminals exist and thus the RCODE should have been NOERROR.

If this occurs, and the RRsets are secure, we set the RCODE to NOERROR and
the security status of the reponse is also considered secure.



git-svn-id: http://unbound.nlnetlabs.nl/svn/trunk@3089 be551aaa-1e26-0410-a405-d3ace91eadb9
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR



git-svn-id: http://unbound.nlnetlabs.nl/svn/trunk@3090 be551aaa-1e26-0410-a405-d3ace91eadb9
- Be lenient when a NSEC NameError response with RCODE=NXDOMAIN is
  received. This is okay according 4035, but not after revising
  existence in 4592.  NSEC empty non-terminals exist and thus the
  RCODE should have been NOERROR. If this occurs, and the RRsets
  are secure, we set the RCODE to NOERROR and the security status
  of the reponse is also considered secure.


git-svn-id: http://unbound.nlnetlabs.nl/svn/trunk@3091 be551aaa-1e26-0410-a405-d3ace91eadb9
- iana portlist updated.


git-svn-id: http://unbound.nlnetlabs.nl/svn/trunk@3092 be551aaa-1e26-0410-a405-d3ace91eadb9