From: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed, 20 May 2026 17:20:35 +0000 (+0100)
Subject: knot-resolver: Don't explicitely configure the CA file
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=742ceea6830e71f0c3b84d17de720ed290294c6e;p=ipfire-2.x.git

knot-resolver: Don't explicitely configure the CA file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/knot-resolver/config.yaml b/config/knot-resolver/config.yaml
index 10f384cae..b462c9df1 100644
--- a/config/knot-resolver/config.yaml
+++ b/config/knot-resolver/config.yaml
@@ -40,8 +40,6 @@ lua:
     local csv = require("csv")
     local ffi = require("ffi")
 
-    local CA_FILE = "/etc/ssl/cert.pem"
-
     -- Helper function to load a key/value configuration file
     local function load_settings(path)
       local settings = {}
@@ -175,7 +173,7 @@ lua:
         if status == "enabled" then
           if proto == "TLS" then
             table.insert(forwarders, {
-              address, hostname=hostname, ca_file=CA_FILE
+              address, hostname=hostname,
             })
           else
             table.insert(forwarders, address)