RPZ: is this config correct?

[George Thessalonikefs]

Hi Andreas,

I should have caught that earlier since it is a fixed bug but now I had 
the time to look into it.

I could reproduce it easily with 1.13.1 and it seems you hit this 
(https://github.com/NLnetLabs/unbound/issues/429) bug which is already 
fixed on the master branch.

With the latest code from master I cannot reproduce it anymore.
Could you verify?

Best regards,
-- George


On 11/05/2021 09:56, A. Schulze via Unbound-users wrote:
> 
> 
> Am 10.05.21 um 23:30 schrieb A. Schulze via Unbound-users:
>>
>>
>> Am 01.05.21 um 12:46 schrieb A. Schulze via Unbound-users:
>>> HTTP works, HTTPS don't.
>>
>> Hello George,
>>
>> is there anything I could test/check/do to help?
> 
> Update:
> 
> I now setup
> 
> * a webserver that
>   - fetch https://urlhaus.abuse.ch/downloads/rpz/ hourly
>   - serve that file by http
> 
> * an unbound instance
>   - configured to use the rpz from the http location
> 
> Turns out: the zonefile written by unbound, *has* current data
> ... as expected ...
> 
> so only fetch by https is broken somehow.
> 
>>
>> Andreas
>>