trust anchors: improvements around DNSKEY refusal

- also refuse revoked DNSKEY (explicitly configured as TA)
- also downgrade missing the SEP bit to a warning
- explicit message when DNSKEY is refused, even without --verbose
- code rewrite, handle flags in a better way than "== 257"
31 jobs for <span class="ref-name">dnssec_log</span> in 35 minutes and 25 seconds (queued for 3 seconds)
Status Job ID Name Coverage
  Build
passed #218418
docker linux amd64
build:asan:linux:amd64

00:01:17

passed #218417
docker linux amd64
build:linux:amd64

00:01:04

passed #218419
docker linux amd64 allowed to fail
srpm

00:00:46

 
  Test
passed #218428
docker linux amd64
deckard:linux:amd64

00:01:43

passed #218436
privileged
distro:epel-7

00:02:01

passed #218435
privileged
distro:fedora-29

00:02:35

passed #218427
docker
doc

00:00:51

passed #218425
dind
docker:build

00:02:06

passed #218426
docker linux amd64
installcheck:linux:amd64

00:00:44

passed #218429
docker linux amd64
installcheck:valgrind:linux:amd64

00:02:26

passed #218422
docker
lint:c

00:02:17

passed #218423
docker
lint:clang-scan-build

00:01:05

passed #218421
docker
lint:lua

00:00:37

passed #218420
docker linux amd64
lint:pedantic

00:01:22

passed #218430
docker
osx:build

00:02:25

passed #218432
docker linux amd64
pytests:lint

00:00:40

passed #218433
docker linux amd64
pytests:run

00:02:20

passed #218434
docker linux amd64
respdiff:iter:udp:linux:amd64

00:02:05

passed #218424
docker linux amd64
test:linux:amd64

00:01:02

passed #218431
docker linux amd64
test:linux:amd64:valgrind

00:01:26

 
  Extended
passed #218437
docker linux amd64
pytests:extended

00:03:27

failed #218438
respdiff
respdiff:fwd-tls6-kresd.udp6

00:14:20

passed #218439
respdiff
respdiff:fwd-udp6-kresd.udp6

00:10:22

failed #218443
respdiff
respdiff:fwd-udp6-unbound.tcp6

00:11:52

failed #218444
respdiff
respdiff:fwd-udp6-unbound.tls6

00:31:24

failed #218442
respdiff
respdiff:fwd-udp6-unbound.udp6

00:21:54

passed #218441
respdiff
respdiff:iter.tls6

00:20:53

passed #218440
respdiff
respdiff:iter.udp6

00:21:55

passed #218445
respdiff
resperf:fwd-tls6.udp-asan

00:21:19

failed #218446
respdiff
resperf:fwd-udp6.udp-asan

00:24:19

passed #218447
respdiff
resperf:iter.udp-asan

00:17:48

 
Name Stage Failure
failed
respdiff:fwd-udp6-unbound.udp6 Extended
Running after script...
$ cp -t . respdiff_commitdir/$RESPDIFF_TEST/j* ||:
$ cp -t . respdiff_commitdir/*$RESPDIFF_TEST*.png ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=59074 revision=f100a208 version=11.6.0
./j*: found 14 matching files
./*.png: found 3 matching files
Uploading artifacts to coordinator... ok id=218442 responseStatus=201 Created token=Gi-zW_VZ
ERROR: Job failed: exit status 1
failed
respdiff:fwd-udp6-unbound.tcp6 Extended
Running after script...
$ cp -t . respdiff_commitdir/$RESPDIFF_TEST/j* ||:
$ cp -t . respdiff_commitdir/*$RESPDIFF_TEST*.png ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=58514 revision=f100a208 version=11.6.0
./j*: found 14 matching files
./*.png: found 3 matching files
Uploading artifacts to coordinator... ok id=218443 responseStatus=201 Created token=9bnsBS2Y
ERROR: Job failed: exit status 1
failed
respdiff:fwd-udp6-unbound.tls6 Extended
Running after script...
$ cp -t . respdiff_commitdir/$RESPDIFF_TEST/j* ||:
$ cp -t . respdiff_commitdir/*$RESPDIFF_TEST*.png ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=59451 revision=f100a208 version=11.6.0
./j*: found 14 matching files
./*.png: found 3 matching files
Uploading artifacts to coordinator... ok id=218444 responseStatus=201 Created token=ybxuJmeY
ERROR: Job failed: exit status 1
failed
respdiff:fwd-tls6-kresd.udp6 Extended
Running after script...
$ cp -t . respdiff_commitdir/$RESPDIFF_TEST/j* ||:
$ cp -t . respdiff_commitdir/*$RESPDIFF_TEST*.png ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=58628 revision=f100a208 version=11.6.0
./j*: found 14 matching files
./*.png: found 3 matching files
Uploading artifacts to coordinator... ok id=218438 responseStatus=201 Created token=Gty4t94x
ERROR: Job failed: exit status 1
failed
resperf:fwd-udp6.udp-asan Extended
kresd_fwd_target_1  | SUMMARY: AddressSanitizer: 32800 byte(s) leaked in 2 allocation(s).
$ exit $EXITCODE
Running after script...
$ cp -t . resperf_commitdir/$RESPERF_TEST/j* ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=59185 revision=f100a208 version=11.6.0
./j*: found 7 matching files
Uploading artifacts to coordinator... ok id=218446 responseStatus=201 Created token=we_oxwsZ
ERROR: Job failed: exit status 1