Upgrade LDNS to 1.7.0.

I've been holding back on this because 1.7.0 requires OpenSSL 1.1.0 or
newer for full DANE support.  But we can't wait forever, and nothing in
base uses DANE anyway, so here we go.

1 files changed, 14 insertions, 0 deletions

diff --git a/contrib/ldns/error.c b/contrib/ldns/error.c
index 82ea61a1dcc2..35ee5bdd5e24 100644
--- a/contrib/ldns/error.c
+++ b/contrib/ldns/error.c
@@ -143,6 +143,20 @@ ldns_lookup_table ldns_error_str[] = {
         { LDNS_STATUS_INVALID_RDF_TYPE, 
 		"The rdata field was not of the expected type" },
         { LDNS_STATUS_RDATA_OVERFLOW, "Rdata size overflow" },
+	{ LDNS_STATUS_SYNTAX_SUPERFLUOUS_TEXT_ERR,
+		"Syntax error, superfluous text present" },
+        { LDNS_STATUS_NSEC3_DOMAINNAME_OVERFLOW,
+		"The NSEC3 domainname length overflow" },
+#if OPENSSL_VERSION_NUMBER < 0x10100000 || defined(HAVE_LIBRESSL)
+        { LDNS_STATUS_DANE_NEED_OPENSSL_GE_1_1_FOR_DANE_TA,
+		"ldns needs to be linked with OpenSSL >= 1.1.0 to be able "
+       		"to verify the DANE-TA usage type." },
+#else
+        { LDNS_STATUS_DANE_NEED_OPENSSL_GE_1_1_FOR_DANE_TA,
+		"ldns depends on the availability of the SSL_get0_dane() and "
+		"X509_STORE_CTX_set0_dane() functions within OpenSSL >= 1.1.0 "
+		"to be able to verify the DANE-TA usage type." },
+#endif
 	{ 0, NULL }
 };