Project

General

Profile

Download (1010 Bytes)

Bug #16937 » 16937.patch

Jim Pingle, 09/02/2026 05:56 PM

View differences:

src/etc/inc/unbound.inc
}
// TLS Configuration
$tlsconfig = "tls-cert-bundle: \"/etc/ssl/cert.pem\"\n";
$cabundle = "{$g['unbound_chroot_path']}/cabundle.pem";
copy("/etc/ssl/cert.pem", $cabundle);
chown($cabundle, 'unbound');
chgrp($cabundle, 'unbound');
$tlsconfig = "tls-cert-bundle: \"{$cabundle}\"\n";
if (isset($unboundcfg['enablessl'])) {
$tlscert_path = "{$g['unbound_chroot_path']}/sslcert.crt";
......
// Write CA and Server Cert
file_put_contents($tlscert_path, $cert_chain);
chown($tlscert_path, 'unbound');
chgrp($tlscert_path, 'unbound');
chmod($tlscert_path, 0644);
file_put_contents($tlskey_path, base64_decode($cert['prv']));
chown($tlskey_path, 'unbound');
chgrp($tlskey_path, 'unbound');
chmod($tlskey_path, 0600);
// Add config for CA and Server Cert
(6-6/6)