Merge branch '3772-revert-fix-single-read-tlsdns-client-v9_18' into 'v9_18'

Don't honour single read per client isc_nm_read() call in the TLSDNS

See merge request isc-projects/bind9!7349

CHANGES

@@ -1,3 +1,6 @@
+6063.	[bug]		Revert a change that limited to honour single
+			read for TLSDNS as it broke XoT. [GL #3772]
+
 6062.	[func]		The DSCP implementation, which has been
 			nonfunctional for some time, is now marked as
 			obsolete and the implementation has been removed.

doc/notes/notes-current.rst

@@ -64,6 +64,8 @@ Bug Fixes
 - Clients may see an unexpected "Prohibited" extended DNS error when ``named``
   is configured with :any:`allow-recursion`). :gl:`#3743`
 
+- Fix a TLS error that occured with large transfers over XoT. :gl:`#3772`
+
 Known Issues
 ~~~~~~~~~~~~
 

lib/isc/netmgr/tlsdns.c

@@ -1120,10 +1120,6 @@ tls_cycle_input(isc_nmsocket_t *sock) {
 				goto failure;
 			}
 
-			if (atomic_load(&sock->client)) {
-				break;
-			}
-
 			if (pending == 0) {
 				break;
 			}