merge in ubuntu 1:9.9.3.dfsg.P2-4ubuntu3
Merge branch 'ubuntu/stable/v9.9.3' into stable/v9.9.5

Conflicts:
	configure
	debian/changelog
move dnssec-coverage to bind9utils

Addresses-Debian-Bug: 739994
dnssec-{checkds,verify} manpages in wrong package

Addresses-Debian-Bug: 739995
changelog: release
Re-enable rrl (now a configure option)

Addresses-Debian-Bug: 741059
9.10.0a2
9.10.0b1
changelog: release
9.10.0b2
FTBFS on kfreebsd.

Addresses-Debian-Bug: 741285
Signed-off-by: LaMont Jones <lamont@debian.org>
9.10.0rc1
revert aclocal.m4 expansion from earlier merge
Initialise OpenSSL before calling chroot()

OpenSSL may need to load additional shared libraries, in particular
for the gost algorithm.  This will not work after we chroot(), so we
need to initialise it before doing that.

Move the calls to dst_lib_init2() and isc_entropy_create() into
setup() and calls to the corresponding cleanup into cleanup().

Addresses-Debian-Bug: 696661
Signed-off-by: LaMont Jones <lamont@debian.org>
add "order random_1" support (return one random RR)

Clients who implement RFC 3484, Section 6, Rule 9 for IPv4 addresses
create serious issues for domains that use rrset-order cyclic or random to do
load balancing, since they erroneously decide that the host with the longest
prefix in common with their own address is "closest", while no such relationship
exists in IPv4.

While technically incorrect, returning exactly one A RR from a random ordering
works around this behavior.  Using a short TTL is a good idea, for fault
tollerance.

Signed-off-by: LaMont Jones <lamont@ubuntu.com>
Add min-cache-ttl and min-ncache-ttl keywords

Sometimes it is useful to set a 'floor' on the TTL for records
to be cached.  Some sites like to use ridiculously low TTLs for
some reason, and that often is not compatible with slow links.

Signed-off-by: Michael Milligan <milli@acmeps.com>
Signed-off-by: LaMont Jones <lamont@debian.org>

Conflicts:
	bin/named/server.c
	lib/dns/ncache.c
	lib/dns/resolver.c
Makefile.in: be explicit about library paths

Debian policy requires that all dependant libs be in the .so, not just the
immediately depended ones.

Signed-off-by: LaMont Jones <lamont@debian.org>

Conflicts:
	lib/isc/Makefile.in
	lib/isccc/Makefile.in
lib/isc/unix/resource.c was missing inttypes.h include.

Addresses-Ubuntu-Bug: 674199
Signed-off-by: LaMont Jones <lamont@debian.org>
mips:atomic.h: improve implementation of atomic ops, fix mips{el,64}

The appended patch extends the configure check to cover mips64 and
mipsel, and improves the mips atomics implementation.

See http://bugs.debian.org/406409 for more detail.

Signed-off-by: LaMont Jones <lamont@debian.org>
fix mips/mipsel startup.

Addresses-Debian-Bug: 516616
Signed-off-by: LaMont Jones <lamont@debian.org>