Don't force /etc/ssl/cert.pem. It does not exist by default, only if security/ca_root_nss is installed. Just use the default OpenSSL search locations which are /etc/ssl/cert.pem and /etc/ssl/certs/.
Details
Details
Diff Detail
Diff Detail
- Repository
- rG FreeBSD src repository
- Lint
Lint Not Applicable - Unit
Tests Not Applicable
Event Timeline
Comment Actions
Looks good to me.
Should note that tls-system-cert is available since 1.16.0 [1].
[1] For #677: Added tls-system-cert to config parser and documentation. https://www.nlnetlabs.nl/projects/unbound/download/#older-versions