webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-05-08 05:56:11 +02:00
Code Issues Packages Projects Releases Wiki Activity

unbound: Drop certificates for local control connection

Browse Source 
These are a cause of worry because they are sometimes generated with
an invalid timestamp and therefore render unbound being unusable.

There is no strong reason to use self-signed certificates for extra
security here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2019-02-17 13:46:51 +00:00
parent 256070e92f
commit 9bc1760052
4 changed files with 4 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
config/unbound/unbound.conf
View File

@@ -83,12 +83,8 @@ server:
remote-control:
control-enable: yes
control-use-cert: yes
control-use-cert: no
control-interface: 127.0.0.1
server-key-file: "/etc/unbound/unbound_server.key"
server-cert-file: "/etc/unbound/unbound_server.pem"
control-key-file: "/etc/unbound/unbound_control.key"
control-cert-file: "/etc/unbound/unbound_control.pem"
# Import any local configurations
include: "/etc/unbound/local.d/*.conf"