From: Tomas Krizek <tomas.krizek@nic.cz>
Date: Thu, 29 Nov 2018 14:13:59 +0000 (+0100)
Subject: distro/kresd.no_ta.conf - mention how to turn off DNSSEC validation
X-Git-Tag: v3.2.0~1^2~10
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=cd1c4ec74224b020f932ea2b0d2f9eaa08c38681;p=thirdparty%2Fknot-resolver.git

distro/kresd.no_ta.conf - mention how to turn off DNSSEC validation
---

diff --git a/distro/common/kresd.no_ta.conf b/distro/common/kresd.no_ta.conf
index 1377ce9f3..2b79542a3 100644
--- a/distro/common/kresd.no_ta.conf
+++ b/distro/common/kresd.no_ta.conf
@@ -13,5 +13,8 @@ modules = {
 -- Listen on localhost (default)
 -- net = { '127.0.0.1', '::1' }
 
+-- To disable DNSSEC validation, uncomment the following line (not recommended)
+-- trust_anchors.keyfile_default = nil
+
 -- Cache size
 cache.size = 100 * MB