- Mention tls name possible when tls is enabled for stub-addr in the

  man page.

diff --git a/doc/Changelog b/doc/Changelog
index ef0c7e18f3a1088014c976ab45ade78abcb09308..4f847da48c0586347f9163ec554c29ceb9d3139f 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,7 @@
+8 June 2020: Wouter
+       - Mention tls name possible when tls is enabled for stub-addr in the
+         man page.
+
 27 May 2020: George
        - Merge PR #241 by Robert Edmonds: contrib/libunbound.pc.in: Do not use
          "Requires:".

diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in
index 2f273377399fbec18de4925049806cf0fe6d9045..6bb7ca09fc7075ed7be1a43cac0ce321bfd93067 100644 (file)
--- a/doc/unbound.conf.5.in
+++ b/doc/unbound.conf.5.in
@@ -1614,6 +1614,9 @@ Name of stub zone nameserver. Is itself resolved before it is used.
 .B stub\-addr: \fI<IP address>
 IP address of stub zone nameserver. Can be IP 4 or IP 6.
 To use a nondefault port for DNS communication append '@' with the port number.
+If tls is enabled, then you can append a '#' and a name, then it'll check
+the tls authentication certificates with that name.  If you combine
+the '@' and '#', the '@' comes first.
 .TP
 .B stub\-prime: \fI<yes or no>
 This option is by default no.  If enabled it performs NS set priming,