NSEC validation failing in nightly

[bluejekyll]

There is something incorrect in the trust-dns-server authority. NSEC validation of publicly signed records functions properly.

cargo test test_nsec_query_example_nonet

which relies on the trust-dns-server Authority fails, while

cargo test test_nsec_query_example -- --ignored

which tests public records, passes

---

Regression on nightly

Ok, had a minute to track down the nightly version that broke this.

repro with:

rustup run nightly-2017-06-20 cargo test test_nsec_query_example_nonet

---

Current understanding of issue

• This appears to be something in the Authority signing logic
• It only affects NSEC records for some reason, and not signatures of other record types
• It does not appear to be related to OpenSSL or Ring as both show the same issue, so it may not be signing issue
  • I need to create more tests to validate the signing of the NSEC record type and work up from there to disqualify that

[bluejekyll]

Possible root cause: rust-lang/rust#39409

[bluejekyll]

the related bug was closed. just need valid test run before closing this: rust-lang/rust#42903

[bluejekyll]

🎉 fixed!