From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 7 Jan 2020 12:59:24 +0000 (+0000)
Subject: unbound: Add path to TLS CA bundle
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ffc46751f29af7759e051cbb0114b79b4fba4433;p=people%2Fms%2Fipfire-2.x.git

unbound: Add path to TLS CA bundle

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/unbound/unbound.conf b/config/unbound/unbound.conf
index 9fca7ef225..755eac9af8 100644
--- a/config/unbound/unbound.conf
+++ b/config/unbound/unbound.conf
@@ -62,6 +62,9 @@ server:
 	use-caps-for-id: yes
 	aggressive-nsec: yes
 
+	# TLS
+	tls-cert-bundle: /etc/ssl/certs/ca-bundle.crt
+
 	# EDNS Buffer Size (#12240)
 	edns-buffer-size: 1232