sessionmanager: Fire event before retiring old session This allows for modules to update fields, which is generally better than maintaining this hard-coded list of transferable properties here.

sessionmanager: Pluck sasl_handler from old session when resuming (fixes #1785)

doap: Fix RDF syntax (thanks Link Mauve)

util.datamapper: Simplify test schema Don't need the function, more compact to just reference the same reference table.

util.openmetrics: Update tools.ietf.org URL to datatracker See bd9e006a7a74 for more context

mod_s2s_auth_certs: Validate certificates against secure SRV targets Secure delegation or "Mini-DANE" As with the existing DANE support, only usable in one direction, client certificate authentication will fail if this is relied on.

net.resolvers.basic: Record hostname coming from secure SRV records Will be useful even later...

net.resolvers.service: Record DNSSEC security status of SRV records Will be useful later.

net.resolvers.service: Fix reporting of Bogus DNSSEC results The order of checks led to Bogus results being reported with a generic "unable to resolve service". This had no practical effects as such results are simply empty and the process would stop there. Tested by attempting to establish s2s with dnssec-bogus.sg and observing the error reply.

Revert unintentionally committed parts of 12bd40b8e105