unbound-host et al is entirely broken in 1.18 unless built with openssl

Michael Tokarev mjt at tls.msk.ru
Wed Sep 6 10:23:08 UTC 2023


Since the following commit (which is part of 1.18):

commit 7e6a7f310de20fe00cfcb3a40086c5a3bbbf7e0f
Author: Philip Homburg <philip at nlnetlabs.nl>
Date:   Fri Mar 24 14:51:37 2023 +0100

     Fix issue #676: Unencrypted query is sent when forward-tls-upstream: yes is
     used without tls-cert-bundle

     Model the behavior of unbound in unbound-host: always create a SSL context

unbound and unbound-host always want ssl, and fail to work completely if
built without openssl support.  In previous versions, at least unbound-host
worked fine, now it prints:

resolve error: initialization failure

for *any* query at all, when built w/o libssl.

Smells like a bug somewhere..

Thanks,

/mjt


More information about the Unbound-users mailing list