From ffc46751f29af7759e051cbb0114b79b4fba4433 Mon Sep 17 00:00:00 2001
From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 7 Jan 2020 12:59:24 +0000
Subject: [PATCH] unbound: Add path to TLS CA bundle

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 config/unbound/unbound.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/config/unbound/unbound.conf b/config/unbound/unbound.conf
index 9fca7ef225..755eac9af8 100644
--- a/config/unbound/unbound.conf
+++ b/config/unbound/unbound.conf
@@ -62,6 +62,9 @@ server:
 	use-caps-for-id: yes
 	aggressive-nsec: yes
 
+	# TLS
+	tls-cert-bundle: /etc/ssl/certs/ca-bundle.crt
+
 	# EDNS Buffer Size (#12240)
 	edns-buffer-size: 1232
 
-- 
2.39.2