TLS certificate question about Unbound 1.9.2

rollingonchrome rollingonchrome at gmail.com
Tue Apr 2 22:25:13 UTC 2019


Thanks again, Yuri.

I'm still having problems. As a reminder, I'm on Raspbian which only has a
1.6.0 stable package.

I downloaded and built the 1.9.1 source code from here:
http://www.unbound.net/downloads/unbound-1.9.1.tar.gz

The build is verified as Version 1.9.1.

It works fine (exactly as on 1.6.0 and 1.9.2) WITHOUT the "tls-cert-bundle"
keyword.

With the "tls-cert-bundle" keyword, I continue to get this error and
nothing works. It appears that unbound doesn't recognize the
"tls-cert-bundle" keyword:

pr  2 15:06:51 raspberrypi_pi-hole systemd[1]: Started Unbound DNS server
via resolvconf.
Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]:
/etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: unknown keyword
'tls-cert-bundle'
Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]:
/etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: stray ':'
Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]:
/etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: stray '"'
Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]:
/etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: unknown keyword
'/etc/ssl/certs/ca-certificates.crt'
Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]:
/etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: stray '"'
Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: read
/etc/unbound/unbound.conf failed: 5 errors in configuration file
Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: [1554242811]
unbound[27172:0] fatal error: Could not read config file:
/etc/unbound/unbound.conf

Yuri yvoinov at gmail.com
Tue Apr 2 21:43:19 CEST 2019
Previous message (by thread): TLS certificate question about Unbound 1.9.2

You're welcome :)

And make sure you really installed built binaries.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20190402/eae09ccf/attachment.htm>


More information about the Unbound-users mailing list