unbound: erm, point to a bundle as it will not handle /etc/ssl/certs ?

PR: https://forum.opnsense.org/index.php?topic=44414.0
opnsense · Dec 3, 2024 · cdb8da7 · cdb8da7
1 parent f06d347
commit cdb8da7
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/opnsense/service/templates/OPNsense/Unbound/core/dot.conf b/src/opnsense/service/templates/OPNsense/Unbound/core/dot.conf
@@ -39,7 +39,9 @@ forward-zone:
 {%   if all_dots|length > 0 %}
 # Forward zones over TLS
 server:
-  tls-system-cert: yes
+  # XXX Unbound only looks for a bundle file when OpenSSL will handle all of it???
+  #tls-system-cert: yes
+  tls-cert-bundle: /usr/local/etc/ssl/cert.pem
 {%     for domain, dots in all_dots|groupby("domain", default=".") %}
 
 forward-zone: