On 2018-05-04 04:41 PM, Marc Branchaud wrote: > On 2018-05-04 04:21 PM, Simon Deziel via Unbound-users wrote: >> Hi Marc, >> >> On 2018-05-04 04:12 PM, Marc Branchaud via Unbound-users wrote: >>> So I'd like to request that: (a) unbound-control avoids using TLS when >>> communicating over a local socket >> You can use "control-use-cert: no" in the remote-control section. > > (Sorry for the duplicate, Simon -- replying to the list this time.) > > Thanks, I'd neglected to mention my remote config. I do have that > already set to no: > > remote-control: > control-enable: yes > control-use-cert: no
I just tested "control-use-cert: no" locally. `unbound-control status` says "options: control(ssl)" but strace'ing the process shows no access to the control cert/key. Toggling it to yes shows it in strace. So it seems to work here despite having misleading status output. Simon
