local-unbound-setup: Use default root certificates
ClosedPublic
Actions

Authored by tijl on Jan 28 2023, 5:04 PM.

Details

Reviewers

des
zlei

Commits

rGd6ab6f93ef94: local-unbound-setup: Use default root certificates
rGf73d4bfc1385: local-unbound-setup: Use default root certificates
rG412d15f7268e: local-unbound-setup: Use default root certificates
rG8932f7ce1783: local-unbound-setup: Use default root certificates

Summary

Don't force /etc/ssl/cert.pem. It does not exist by default, only if security/ca_root_nss is installed. Just use the default OpenSSL search locations which are /etc/ssl/cert.pem and /etc/ssl/certs/.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

tijl created this revision.Jan 28 2023, 5:04 PM

Herald added a subscriber: imp. · View Herald TranscriptJan 28 2023, 5:04 PM

tijl requested review of this revision.Jan 28 2023, 5:04 PM

Looks good to me.

Should note that tls-system-cert is available since 1.16.0 [1].

[1] For #677: Added tls-system-cert to config parser and documentation. https://www.nlnetlabs.nl/projects/unbound/download/#older-versions

This revision is now accepted and ready to land.Feb 7 2023, 8:58 AM

Closed by commit rG8932f7ce1783: local-unbound-setup: Use default root certificates (authored by tijl). · Explain WhyFeb 7 2023, 10:22 AM

This revision was automatically updated to reflect the committed changes.

tijl added a commit: rG8932f7ce1783: local-unbound-setup: Use default root certificates.

tijl added a commit: rG412d15f7268e: local-unbound-setup: Use default root certificates.Feb 13 2023, 10:59 AM

tijl added a commit: rGf73d4bfc1385: local-unbound-setup: Use default root certificates.Feb 13 2023, 11:42 AM

tijl added a commit: rGd6ab6f93ef94: local-unbound-setup: Use default root certificates.Feb 15 2023, 8:46 AM

Revision Contents
Changeset List

Path

Size

usr.sbin/

unbound/

setup/

local-unbound-setup.sh

2 lines

Diff 116688

View Options

usr.sbin/unbound/setup/local-unbound-setup.sh

local-unbound-setup: Use default root certificatesClosedPublicActions