TLS certificate question about Unbound 1.9.2

[rollingonchrome]

Hi Yuri,

Thank you for your help. Yes, 853 is open. I can see in the log files that
Unbound is making SSL connections, though they are not authenticated.

I believe the problem is the tls-cert-bundle keyword or syntax:

tls-cert-bundle: "/etc/ssl/certs/ca-certificates.crt"

I am getting the following errors when that line is included in my config
file:

Apr  2 09:25:13 raspberrypi_pi-hole unbound[6522]:
/etc/unbound/unbound.conf.d/pi-hole.conf:96: error: unknown keyword
'tls-cert-bundle'
Apr  2 09:25:13 raspberrypi_pi-hole unbound[6522]:
/etc/unbound/unbound.conf.d/pi-hole.conf:96: error: stray ':'
Apr  2 09:25:13 raspberrypi_pi-hole unbound[6522]:
/etc/unbound/unbound.conf.d/pi-hole.conf:96: error: stray '"'
Apr  2 09:25:13 raspberrypi_pi-hole unbound[6522]:
/etc/unbound/unbound.conf.d/pi-hole.conf:96: error: unknown keyword
'/etc/ssl/certs/ca-certificates.crt'
Apr  2 09:25:13 raspberrypi_pi-hole unbound[6522]:
/etc/unbound/unbound.conf.d/pi-hole.conf:96: error: stray '"'

It looks like either my syntax is incorrect or Unbound is not recognizing
the tls-cert-bundle keyword.

Thank you,

RoC

>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20190402/acde1192/attachment.htm>