[Unbound-users] ssl-upstream

[Michael M. Miskulin]

Hello

I configured a basic caching server. Seems to work fine. Now I've
tried to enable "ssl-upstream" but to no avail.

What is the correct procedure to get this to work? Clearly it is more
involved than just uncommenting that from the conf file.


Thanks

[W.C.A. Wijngaards]

Hi Michael,

Post by Michael M. Miskulin
Hello
I configured a basic caching server. Seems to work fine. Now
I've tried to enable "ssl-upstream" but to no avail.
What is the correct procedure to get this to work? Clearly it is
more involved than just uncommenting that from the conf file.

You need to make the upstream DNS servers also have ssl enabled. In
unbound this is the ssl-port, ssl-service-* config settings. And then
you would need stub or forward clauses to point to those server(s).

Best regards,
Wouter