upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-20 23:00:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Default for ssl-port is port 853, the temporary port assignment

Browse source 
for secure domain name system traffic.
  If you used to rely on the older default of port 443, you have
  to put a clause in unbound.conf for that.  The new value is likely
  going to be the standardised port number for this traffic.


git-svn-id: file:///svn/unbound/trunk@3502 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2015-10-09 07:55:21 +00:00
parent 2b46074c60
commit c3a45dde15
4 changed files with 10 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
doc/Changelog
View file

@ -1,3 +1,10 @@
9 October 2015: Wouter
- Default for ssl-port is port 853, the temporary port assignment
for secure domain name system traffic.
If you used to rely on the older default of port 443, you have
to put a clause in unbound.conf for that. The new value is likely
going to be the standardised port number for this traffic.
6 October 2015: Wouter 6 October 2015: Wouter
- 1.5.5 release. - 1.5.5 release.
- trunk tracks the development of 1.5.6. - trunk tracks the development of 1.5.6.

2
doc/example.conf.in
View file

@ -552,7 +552,7 @@ server:
# default is "" (disabled). requires restart to take effect. # default is "" (disabled). requires restart to take effect.
# ssl-service-key: "path/to/privatekeyfile.key" # ssl-service-key: "path/to/privatekeyfile.key"
# ssl-service-pem: "path/to/publiccertfile.pem" # ssl-service-pem: "path/to/publiccertfile.pem"
# ssl-port: 443 # ssl-port: 853
# request upstream over SSL (with plain DNS inside the SSL stream). # request upstream over SSL (with plain DNS inside the SSL stream).
# Default is no. Can be turned on and off with unbound-control. # Default is no. Can be turned on and off with unbound-control.

2
doc/unbound.conf.5.in
View file

@ -362,7 +362,7 @@ The public key certificate pem file for the ssl service. Default is "",
turned off. turned off.
.TP .TP
.B ssl\-port: \fI<number> .B ssl\-port: \fI<number>
The port number on which to provide TCP SSL service, default 443, only The port number on which to provide TCP SSL service, default 853, only
interfaces configured with that port number as @number get the SSL service. interfaces configured with that port number as @number get the SSL service.
.TP .TP
.B do\-daemonize: \fI<yes or no> .B do\-daemonize: \fI<yes or no>

2
util/config_file.c
View file

@ -100,7 +100,7 @@ config_create(void)
cfg->tcp_upstream = 0; cfg->tcp_upstream = 0;
cfg->ssl_service_key = NULL; cfg->ssl_service_key = NULL;
cfg->ssl_service_pem = NULL; cfg->ssl_service_pem = NULL;
cfg->ssl_port = 443; cfg->ssl_port = 853;
cfg->ssl_upstream = 0; cfg->ssl_upstream = 0;
cfg->use_syslog = 1; cfg->use_syslog = 1;
cfg->log_time_ascii = 0; cfg->log_time_ascii = 0;