[Bug 208529] Error setting up SSL_CTX client key and cert and control-enable: no

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=208529

Frans-Jan van Steenbeek <frans-jan at van-steenbeek.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |frans-jan at van-steenbeek.net

--- Comment #3 from Frans-Jan van Steenbeek <frans-jan at van-steenbeek.net> ---
Created attachment 170744
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=170744&action=edit
Suggested patch

See attached suggested patch.

Assuming people use unbound-control with local_unbound is a bit of a stretch,
especially since unbound-control-setup isn't even bundled. This patch tests the
functionality of the local resolver, which is just as good or even better than
querying the state. It assumes that local_unbound is configured to run on IPv4
localhost and that the .com zone is not somehow disabled or inaccessible. These
assumptions are *way* smaller than assuming unbound-control works. Besides
that, failure is less "messy" to look at.

-- 
You are receiving this mail because:
You are the assignee for the bug.