unbound: Ship ICANN's certificates for trust anchor validation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2016-08-06 15:24:00 +01:00
parent c648dd88f5
commit cb21683968
3 changed files with 322 additions and 0 deletions

View File

@@ -92,5 +92,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
/var/lib/unbound/root.key
chown -Rv nobody.nobody /var/lib/unbound
# Ship ICANN's certificates to validate DNS trust anchors
install -v -m 644 $(DIR_SRC)/config/unbound/icannbundle.pem \
/etc/unbound/icannbundle.pem
@rm -rf $(DIR_APP)
@$(POSTBUILD)