TLS certificate question about Unbound 1.9.2

Yuri yvoinov at gmail.com
Tue Apr 2 17:26:33 UTC 2019


02.04.2019 23:10, rollingonchrome via Unbound-users пишет:
> Hi Yuri,
>
> Thank you for your help. Yes, 853 is open. I can see in the log files
> that Unbound is making SSL connections, though they are not authenticated.
Wait. What openssl version you have?
>
> I believe the problem is the tls-cert-bundle keyword or syntax:
>
> tls-cert-bundle: "/etc/ssl/certs/ca-certificates.crt"  
>
> I am getting the following errors when that line is included in my
> config file:
>
> Apr  2 09:25:13 raspberrypi_pi-hole unbound[6522]:
> /etc/unbound/unbound.conf.d/pi-hole.conf:96: error: unknown keyword
> 'tls-cert-bundle'
> Apr  2 09:25:13 raspberrypi_pi-hole unbound[6522]:
> /etc/unbound/unbound.conf.d/pi-hole.conf:96: error: stray ':'
> Apr  2 09:25:13 raspberrypi_pi-hole unbound[6522]:
> /etc/unbound/unbound.conf.d/pi-hole.conf:96: error: stray '"'
> Apr  2 09:25:13 raspberrypi_pi-hole unbound[6522]:
> /etc/unbound/unbound.conf.d/pi-hole.conf:96: error: unknown keyword
> '/etc/ssl/certs/ca-certificates.crt'
> Apr  2 09:25:13 raspberrypi_pi-hole unbound[6522]:
> /etc/unbound/unbound.conf.d/pi-hole.conf:96: error: stray '"'
>
> It looks like either my syntax is incorrect or Unbound is not
> recognizing the tls-cert-bundle keyword.
>
> Thank you,
>
> RoC
>
-- 
"C++ seems like a language suitable for firing other people's legs."

*****************************
* C++20 : Bug to the future *
*****************************

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20190402/12651168/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20190402/12651168/attachment.bin>


More information about the Unbound-users mailing list