bind: enable DIG_SIGCHASE (fix #10728)

[FlorentBecker]

Motivation for this change

See #10728

Things done

• Tested using sandboxing
  (nix.useSandbox on NixOS,
  or option build-use-sandbox in nix.conf
  on non-NixOS)
• Built on platform(s)
  • NixOS
  • macOS
  • Linux
• Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
• Tested execution of all binary files (usually in ./result/bin/)
• Fits CONTRIBUTING.md.

---

[mention-bot]

@FlorentBecker, thanks for your PR! By analyzing the history of the files in this pull request, we identified @dezgeg, @fpletz and @edolstra to be potential reviewers.

[vcunat]

I don't think it works, as it should accept +sigchase but still doesn't. (I tested it does work on Ubuntu.)

$ ./result-dnsutils/bin/dig @dns102.comcast.net. dnssec-failed.org +dnssec +sigchase
Invalid option: +sigchase
...

[abbradar]

I think it should be set before ./configure, so just:

  STD_CDEFINES = [ "-DDIG_SIGCHASE=1" ];

instead of postConfigure should do the job.

[vcunat]

Thanks. Nice feature, at a cursory look. Proliferation of DNSSEC support is part of my paid job :-)