From: Yorgos Thessalonikefs Date: Wed, 25 Jun 2025 11:56:50 +0000 (+0200) Subject: - Fix #1247: forward-first: ssl handshake failed on root nameservers. X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=ca153f465723c3cefdaa7d299962369bc95da7c0;p=thirdparty%2Funbound.git - Fix #1247: forward-first: ssl handshake failed on root nameservers. --- diff --git a/doc/Changelog b/doc/Changelog index 74b455246..cd09dba64 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,3 +1,6 @@ +25 June 2025: Yorgos + - Fix #1247: forward-first: ssl handshake failed on root nameservers. + 20 June 2025: Yorgos - Fix #1293: EDE 6 is attached to insecure cached answers when client sends the CD bit. diff --git a/iterator/iterator.c b/iterator/iterator.c index 0bf5523c5..267eac5b9 100644 --- a/iterator/iterator.c +++ b/iterator/iterator.c @@ -2180,6 +2180,10 @@ processLastResort(struct module_qstate* qstate, struct iter_qstate* iq, a->lame, a->tls_auth_name, -1, NULL); } lock_rw_unlock(&qstate->env->hints->lock); + /* copy over some configuration since we update the + * delegation point in place */ + iq->dp->tcp_upstream = dp->tcp_upstream; + iq->dp->ssl_upstream = dp->ssl_upstream; } iq->dp->has_parent_side_NS = 1; } else if(!iq->dp->has_parent_side_NS) {