Bug #16937
open
Unbound aborts, and DNS stops resolving after restarted while using "Respond to incoming SSL/TLS queries from local clients" option
0%
Description
Please refer to following forum post: https://forum.netgate.com/topic/200922/unbound-dns-resolver-periodically-non-responsive
When Unbound is restarted (by pfBlockerNG for example), and this option is selected, Unbound starts to produce the following error and DNS stops resolving:
unbound 1669 [1669:4] error: Error in SSL_CTX use_PrivateKey_file crypto error:8000000D:system library::Permission denied
I have unchecked the option for now. See attached screenshots/log entries
Files
Updated by Georgiy Tyutyunnik about 2 months ago
can't reproduce with stock config on 26.03.1, unbound config verified to match the forum thread
can you add the full config sections for the DNSBL, unbound and the server certificate, if possible?
please also add the output of the command
ls -lah /var/unbound/
Updated by Marcos M about 2 months ago
- Status changed from New to Incomplete
- Priority changed from Very High to Normal
Updated by RED SKULL 23 days ago
Georgiy Tyutyunnik wrote in #note-1:
can't reproduce with stock config on 26.03.1, unbound config verified to match the forum thread
can you add the full config sections for the DNSBL, unbound and the server certificate, if possible?
please also add the output of the command
ls -lah /var/unbound/
total 163 MB
drwxr-xr-x 8 unbound unbound 35B Jul 31 22:46 .
drwxr-xr-x 27 root wheel 27B Aug 15 2025 ..
-rw-r--r-- 1 root unbound 1.3K Jul 31 22:45 access_lists.conf
drwxr-xr-x 2 unbound unbound 2B Aug 15 2025 conf.d
dr-xr-xr-x 9 root wheel 512B Jul 31 21:59 dev
-rw-r--r-- 1 root unbound 0B Jul 31 22:45 dhcpleases_entries.conf
-rw-r--r-- 1 root unbound 3.3K Jul 31 21:58 dnsbl_cert.pem
-rw-r--r-- 1 root unbound 0B Jul 31 22:45 domainoverrides.conf
-rw-r--r-- 1 root unbound 488B Jul 31 22:45 host_entries.conf
drwxr-xr-x 2 root unbound 3B Oct 3 2025 leases
drwxr-xr-x 4 root wheel 86B Jul 31 21:57 lib
-rw-r--r-- 1 root unbound 1.4K Oct 3 2025 pfb_dnsbl_lighty.conf
-rw-r--r-- 1 root unbound 197B Jul 31 19:47 pfb_dnsbl.safesearch.conf
-rw-r--r-- 1 root unbound 691M Jul 31 20:26 pfb_py_data.txt
-rw-r--r-- 1 unbound unbound 8.0K Jul 31 22:44 pfb_py_dnsbl.sqlite
-rw-r--r-- 1 root unbound 1.6M Jul 31 21:58 pfb_py_hsts.txt
-rw-r--r-- 1 unbound unbound 12K Jul 31 22:46 pfb_py_resolver.sqlite
-rw-r--r-- 1 root unbound 25K Oct 3 2025 pfb_py_ss.txt
-rw-r--r-- 1 root unbound 5.1K Jul 20 13:20 pfb_py_whitelist.txt
-rw-r--r-- 1 root unbound 5.5K Jul 31 21:58 pfb_unbound_include.inc
-rw-r--r-- 1 root unbound 651B Jul 5 04:25 pfb_unbound.ini
-rw-r--r-- 1 root unbound 65K Jul 31 21:58 pfb_unbound.py
-rw-r--r-- 1 root unbound 300B Oct 3 2025 remotecontrol.conf
-rw-r--r-- 1 unbound unbound 1.2K Jul 31 22:46 root.key
-rw-r--r-- 1 root unbound 2.0K Jul 31 22:24 sslcert.crt
-rw------- 1 root unbound 306B Jul 31 22:24 sslcert.key
-rw------- 1 unbound unbound 2.4K Oct 3 2025 unbound_control.key
-rw-r----- 1 unbound unbound 1.5K Oct 3 2025 unbound_control.pem
-rw------- 1 unbound unbound 2.4K Oct 3 2025 unbound_server.key
-rw-r----- 1 unbound unbound 1.5K Oct 3 2025 unbound_server.pem
-rw-r--r-- 1 unbound unbound 3.3K Jul 31 22:45 unbound.conf
-rw-r--r-- 1 root unbound 3.9K Jul 19 04:14 unbound.conf.error
drwxr-xr-x 3 root unbound 3B Oct 3 2025 usr
drwxr-xr-x 3 root unbound 3B Oct 3 2025 var
Updated by P Davis 23 days ago
- File Certificates.png Certificates.png added
- File DNSBL.png DNSBL.png added
- File Unbound.png Unbound.png added
Can you add the full config sections for the DNSBL, unbound and the server certificate, if possible?
See attached files, let me know if this is what you are looking for.
Also, here is the output of the command ls -lah /var/unbound/:
total 20 MB
drwxr-xr-x 8 unbound unbound 33B Aug 1 03:31 .
drwxr-xr-x 28 root wheel 28B Dec 1 2025 ..rw-r--r- 1 root unbound 343B Jul 23 05:09 access_lists.conf
drwxr-xr-x 2 unbound unbound 2B Dec 1 2025 conf.d
dr-xr-xr-x 8 root wheel 512B Jul 23 05:09 devrw-r--r- 1 root unbound 0B Jul 23 05:09 dhcpleases_entries.confrw-r--r- 1 root unbound 3.3K Jul 3 05:41 dnsbl_cert.pemrw-r--r- 1 root unbound 0B Jul 23 05:09 domainoverrides.confrw-r--r- 1 root unbound 523B Jul 23 05:09 host_entries.conf
drwxr-xr-x 2 root unbound 4B Nov 26 2024 leases
drwxr-xr-x 5 root wheel 96B May 28 05:26 librw-r--r- 1 root unbound 1.4K Aug 8 2025 pfb_dnsbl_lighty.confrw-r--r- 1 unbound unbound 8.0K Aug 1 03:28 pfb_py_cache.sqliterw-r--r- 1 root unbound 86M Aug 1 00:32 pfb_py_data.txtrw-r--r- 1 unbound unbound 8.0K Aug 1 03:28 pfb_py_dnsbl.sqliterw-r--r- 1 root unbound 1.6M Jul 3 05:41 pfb_py_hsts.txtrw-r--r- 1 unbound unbound 16K Aug 1 03:31 pfb_py_resolver.sqliterw-r--r- 1 root unbound 1.3K Dec 18 2024 pfb_py_whitelist.txtrw-r--r- 1 root unbound 5.5K Jul 3 05:41 pfb_unbound_include.incrw-r--r- 1 root unbound 356B Dec 19 2025 pfb_unbound.inirw-r--r- 1 root unbound 65K Jul 3 05:41 pfb_unbound.pyrw-r--r- 1 root unbound 300B Dec 31 2021 remotecontrol.confrw-r--r- 1 unbound unbound 1.2K Aug 1 00:32 root.keyrw-r--r- 1 root unbound 3.7K Jul 7 19:22 sslcert.crtrw------ 1 root unbound 1.7K Jul 7 19:22 sslcert.keyrw------ 1 unbound unbound 2.4K Dec 31 2021 unbound_control.keyrw-r---- 1 unbound unbound 1.3K Dec 31 2021 unbound_control.pemrw------ 1 unbound unbound 2.4K Dec 31 2021 unbound_server.keyrw-r---- 1 unbound unbound 1.3K Dec 31 2021 unbound_server.pemrw-r--r- 1 unbound unbound 2.2K Jul 23 05:09 unbound.confrw-r--r- 1 root unbound 2.6K Jul 6 12:35 unbound.conf.error
drwxr-xr-x 3 root unbound 3B Jul 1 2022 usr
drwxr-xr-x 3 root unbound 3B Feb 17 2023 var
Also available in: Atom