[Dnssec-trigger] [Bug] incorrect DNS servers are used when network-manager connects to VPN

[Ralf Jung]

Hi,

> As Paul said, there is an integration with NM if the VPN software exposes
> necessary information to the NM. The information is then read using libnm
> API from NM by dnssec-trigger hooks.
> 
> I'm not a big fan of every VPN software re-configuring unbound on its
> own. This is really bad approach and should not be used.

Without knowing the technical details, I completely agree. It sounds
like a bad hack.

Do you have an example for a VPN plugin that uses the "right" way to
expose information to NM? That would be a good starter to get this into
OpenConnect.

Kind regards
Ralf