knot-resolver: Don't explicitely configure the CA file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/knot-resolver/config.yaml b/config/knot-resolver/config.yaml
index 10f384cae621a38e4ddb59a09757ab55738f042f..b462c9df1eae1fdebf9fc99f4f8dbdb78500b2bd 100644 (file)
--- a/config/knot-resolver/config.yaml
+++ b/config/knot-resolver/config.yaml
@@ -40,8 +40,6 @@ lua:
     local csv = require("csv")
     local ffi = require("ffi")
 
-    local CA_FILE = "/etc/ssl/cert.pem"
-
     -- Helper function to load a key/value configuration file
     local function load_settings(path)
       local settings = {}
@@ -175,7 +173,7 @@ lua:
         if status == "enabled" then
           if proto == "TLS" then
             table.insert(forwarders, {
-              address, hostname=hostname, ca_file=CA_FILE
+              address, hostname=hostname,
             })
           else
             table.insert(forwarders, address)