about doh configuration

Unbound
1

Hi,

I want to verify unbound doh.

My unbound setting is below

unbound.conf

2

a message of 40 lines which said:

error: error for cert file: /var/unbound/etc/certs/doh_server.pem
error: error in SSL_CTX use_certificate_chain_file crypto error:02001002:system library:fopen:No such file or directory

Unbound configured to chroot and the certificate is not in the chroot
directory?

3

Shuji Yoshida via Unbound-users writes:

> Hi,
>
> I want to verify unbound doh.
>
> My unbound setting is below
>
> unbound.conf
> --------------------------------------
> server:
> interface: 192.168.10.100@443
> tls-service-key: "/var/unbound/etc/certs/doh_privage.key"

You mistyped private it seems

  jaap

4

a message of 40 lines which said:

> error: error for cert file: /var/unbound/etc/certs/doh_server.pem
> error: error in SSL_CTX use_certificate_chain_file crypto error:02001002:system library:fopen:No such file or directory

Hi Stephane,

Unbound configured to chroot and the certificate is not in the chroot
directory?

No chroot but when compile, I specify '--with-run-dir=/var/unbound'.
In config file, 'directory' and 'chroot' is commented out.

-- Syuji

5

Hi jaap

You mistyped private it seems

I mistyped it and fixed, but same error.

-- Syuji

6

G'morning Yoshida-san,

No chroot but when compile, I specify '--with-run-dir=/var/unbound'.
In config file, 'directory' and 'chroot' is commented out.

configure --help says:

   --with-chroot-dir=path set default directory to chroot to (by default same
                           as run-dir)

so, your unbound chroot() actually, doesn't it?

I guess that

  server:
    chroot: ""

in unbound.conf helps.

7

Hi Stephane

Sorry, It seems that the location of the certificate file was wrong.
I change locate certificate file, unbound booted.

-- Syuji