Hi,

When I add some garbage to my config:

=============================
$ cat unbound.conf
# Unbound configuration file for Debian.
#
# See the unbound.conf(5) man page.
#
# See /usr/share/doc/unbound/examples/unbound.conf for a commented
# reference config file.
#
# The following line includes additional configuration files from the
# /etc/unbound/unbound.conf.d directory.
include: "/etc/unbound/unbound.conf.d/*.conf"

# these lines are added
hoeba:
   kek: yes

=========================

I see similar errors:

$ sudo unbound-checkconf
/etc/unbound/unbound.conf:12: error: unknown keyword 'hoeba'
/etc/unbound/unbound.conf:12: error: stray ':'
/etc/unbound/unbound.conf:13: error: unknown keyword 'kek'
/etc/unbound/unbound.conf:13: error: stray ':'
/etc/unbound/unbound.conf:13: error: unknown keyword 'yes'
read /etc/unbound/unbound.conf failed: 5 errors in configuration file


Maybe you indentation is just wrong? To me this looks like 'tls-cert-bundle' is not properly place inside a "server:" block. It's hard to see in your HTML-formatted email.

Kind regards,
        Tom

On 03-04-19 00:25, rollingonchrome via Unbound-users wrote:
Thanks again, Yuri.

I'm still having problems. As a reminder, I'm on Raspbian which only has a 1.6.0 stable package.

I downloaded and built the 1.9.1 source code from here: http://www.unbound.net/downloads/unbound-1.9.1.tar.gz

The build is verified as Version 1.9.1.

It works fine (exactly as on 1.6.0 and 1.9.2) WITHOUT the "tls-cert-bundle" keyword.

With the "tls-cert-bundle" keyword, I continue to get this error and nothing works. It appears that unbound doesn't recognize the "tls-cert-bundle" keyword:

pr  2 15:06:51 raspberrypi_pi-hole systemd[1]: Started Unbound DNS server via resolvconf. Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: /etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: unknown keyword 'tls-cert-bundle' Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: /etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: stray ':' Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: /etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: stray '"' Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: /etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: unknown keyword '/etc/ssl/certs/ca-certificates.crt' Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: /etc/unbound/unbound.conf.d/tls-cert-bundle.conf:4: error: stray '"' Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: read /etc/unbound/unbound.conf failed: 5 errors in configuration file Apr  2 15:06:51 raspberrypi_pi-hole unbound[27172]: [1554242811] unbound[27172:0] fatal error: Could not read config file: /etc/unbound/unbound.conf

Yuri yvoinov at gmail.com <http://gmail.com>
Tue Apr 2 21:43:19 CEST 2019
Previous message (by thread): TLS certificate question about Unbound 1.9.2

You're welcome :)

And make sure you really installed built binaries.



Reply via email to