upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-24 00:29:58 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

explain how to read the certificate.

Browse source 
git-svn-id: file:///svn/unbound/trunk@4639 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2018-04-20 13:45:59 +00:00
parent 7444b3a8bf
commit 0b21483b17
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/unbound.conf.5.in
View file

@ -1473,6 +1473,10 @@ To use a nondefault port for DNS communication append '@' with the port number.
If tls is enabled, then you can append a '#' and a name, then it'll check If tls is enabled, then you can append a '#' and a name, then it'll check
the tls authentication certificates with that name. If you combine the tls authentication certificates with that name. If you combine
the '@' and '#', the '@' comes first. the '@' and '#', the '@' comes first.
.IP
At high verbosity it logs the TLS certificate, with TLS enabled.
If you leave out the '#' and auth name from the forward\-addr, any
name is accepted. The cert must also match a CA from the tls\-cert\-bundle.
.TP .TP
.B forward\-first: \fI<yes or no> .B forward\-first: \fI<yes or no>
If enabled, a query is attempted without the forward clause if it fails. If enabled, a query is attempted without the forward clause if it fails.