TLS certificate question about Unbound 1.9.2

[Tom Hendrikx]

Hi,

When I add some garbage to my config:

=============================
$ cat unbound.conf
# Unbound configuration file for Debian.
#
# See the unbound.conf(5) man page.
#
# See /usr/share/doc/unbound/examples/unbound.conf for a commented
# reference config file.
#
# The following line includes additional configuration files from the
# /etc/unbound/unbound.conf.d directory.
include: "/etc/unbound/unbound.conf.d/*.conf"

# these lines are added
hoeba:
    kek: yes

=========================

I see similar errors:

$ sudo unbound-checkconf
/etc/unbound/unbound.conf:12: error: unknown keyword 'hoeba'
/etc/unbound/unbound.conf:12: error: stray ':'
/etc/unbound/unbound.conf:13: error: unknown keyword 'kek'
/etc/unbound/unbound.conf:13: error: stray ':'
/etc/unbound/unbound.conf:13: error: unknown keyword 'yes'
read /etc/unbound/unbound.conf failed: 5 errors in configuration file


Maybe you indentation is just wrong? To me this looks like 
'tls-cert-bundle' is not properly place inside a "server:" block.  It's 
hard to see in your HTML-formatted email.

Kind regards,
	Tom

On 03-04-19 00:25, rollingonchrome via Unbound-users wrote:
> Thanks again, Yuri.
> 
> I'm still having problems. As a reminder, I'm on Raspbian which only has 
> a 1.6.0 stable package.
> 
> I downloaded and built the 1.9.1 source code from here: 
> http://www.unbound.net/downloads/unbound-1.9.1.tar.gz
> 
> The build is verified as Version 1.9.1.
> 
> It works fine (exactly as on 1.6.0 and 1.9.2) WITHOUT the 
> "tls-cert-bundle" keyword.
> 
> With the "tls-cert-bundle" keyword, I continue to get this error and 
> nothing works. It appears that unbound doesn't recognize the 
> "tls-cert-bundle" keyword:
> 
> pr  2 15:06:51 raspberrypi_pi-hole systemd[1]: Started Unbound DNS 
> server via resolvconf.
> Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: 
> /etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: unknown 
> keyword 'tls-cert-bundle'
> Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: 
> /etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: stray ':'
> Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: 
> /etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: stray '"'
> Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: 
> /etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: unknown 
> keyword '/etc/ssl/certs/ca-certificates.crt'
> Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: 
> /etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: stray '"'
> Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: read 
> /etc/unbound/unbound.conf failed: 5 errors in configuration file
> Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: [1554242811] 
> unbound[27172:0] fatal error: Could not read config file: 
> /etc/unbound/unbound.conf
> 
> Yuri yvoinov at gmail.com <http://gmail.com>
> Tue Apr 2 21:43:19 CEST 2019
> Previous message (by thread): TLS certificate question about Unbound 1.9.2
> 
> You're welcome :)
> 
> And make sure you really installed built binaries.
> 
>