unbound: Drop certificates for local control connection

These are a cause of worry because they are sometimes generated with
an invalid timestamp and therefore render unbound being unusable.

There is no strong reason to use self-signed certificates for extra
security here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2019-02-17 13:46:51 +00:00
parent 256070e92f
commit 9bc1760052
4 changed files with 4 additions and 10 deletions

View File

@@ -62,6 +62,7 @@ if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then
fi
/etc/init.d/sshd restart
/etc/init.d/apache restart
/etc/init.d/unbound restart
# This update needs a reboot...
touch /var/run/need_reboot