From: Yorgos Thessalonikefs Date: Sat, 12 Jul 2025 15:37:54 +0000 (+0200) Subject: - Update man page templates from rst. X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fheads%2Fmaster;p=thirdparty%2Funbound.git - Update man page templates from rst. --- diff --git a/doc/unbound-control.8.in b/doc/unbound-control.8.in index 4a3bf6374..687c680e2 100644 --- a/doc/unbound-control.8.in +++ b/doc/unbound-control.8.in @@ -1367,6 +1367,15 @@ Increased for every RRset inspection that fails. .UNINDENT .INDENT 0.0 .TP +.B num.valops +The number of validation operations performed by the validator. +Increased for every RRSIG verification operation regardless of the +validation result. +The RRSIG and key combination needs to first pass some sanity checks before +Unbound even performs the verification, e.g., length/protocol checks. +.UNINDENT +.INDENT 0.0 +.TP .B unwanted.queries Number of queries that were refused or dropped because they failed the access control settings. diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in index f6b748d5c..5cb497c97 100644 --- a/doc/unbound.conf.5.in +++ b/doc/unbound.conf.5.in @@ -996,6 +996,7 @@ that likely the client does not need a reply for any more. This could happen if the host has not been able to service the queries for a while, i.e. Unbound is not running, and then is enabled again. It uses timestamp socket options. +The socket option is available on the Linux and FreeBSD platforms. .sp Default: 0 (disabled) .UNINDENT @@ -2283,8 +2284,8 @@ Default: yes .INDENT 0.0 .TP .B disable\-dnssec\-lame\-check: \fI\fP -If true, disables the DNSSEC lameness check in the iterator. -This check sees if RRSIGs are present in the answer, when dnssec is +If yes, disables the DNSSEC lameness check in the iterator. +This check sees if RRSIGs are present in the answer, when DNSSEC is expected, and retries another authority if RRSIGs are unexpectedly missing. The validator will insist in RRSIGs for DNSSEC signed domains regardless of this setting, if a trust anchor is loaded. @@ -3750,7 +3751,7 @@ Default: 65001 .B ede: \fI\fP If enabled, Unbound will respond with Extended DNS Error codes (\fI\%RFC 8914\fP). -These EDEs privide additional information with a response mainly for, but +These EDEs provide additional information with a response mainly for, but not limited to, DNS and DNSSEC errors. .sp When the \fI\%val\-log\-level\fP option is also