X-Git-Url: http://git.ipfire.org/?p=people%2Fpmueller%2Fipfire-2.x.git;a=blobdiff_plain;f=src%2Finitscripts%2Fsystem%2Funbound;h=a1763a1fed7564532991e176ee542fc6125674c2;hp=7e804291852e11f18b815f53646963d989674dd1;hb=183b23b5ca703bd0ee837e135c84a9b91b1fcb91;hpb=73b3a1264fcfbf93390ec9d9cb1f12ec62e73878 diff --git a/src/initscripts/system/unbound b/src/initscripts/system/unbound index 7e80429185..a1763a1fed 100644 --- a/src/initscripts/system/unbound +++ b/src/initscripts/system/unbound @@ -439,12 +439,18 @@ enable_dnssec() { # Don't do anything if DNSSEC is already activated [ "${status}" = "no" ] && return 0 + # Log DNSSEC status + echo "on" > /var/ipfire/red/dnssec-status + # Activate DNSSEC and flush cache with any stale and unvalidated data unbound-control -q set_option val-permissive-mode: no unbound-control -q flush_zone . } disable_dnssec() { + # Log DNSSEC status + echo "off" > /var/ipfire/red/dnssec-status + unbound-control -q set_option val-permissive-mode: yes }