Skip to content
Permalink
Browse files

rc: fix dot+dnssec startup & proxying

  • Loading branch information...
themiron committed Apr 15, 2019
1 parent 72f61e1 commit 43c891cb5ef1c8c7f188100b959e6c4e562b30e2
Showing with 5 additions and 5 deletions.
  1. +5 −5 release/src/router/rc/services.c
@@ -1714,11 +1714,12 @@ void start_dnsmasq(void)
}

#ifdef RTCONFIG_DNSSEC
if (nvram_get_int("dnssec_enable")
#ifdef RTCONFIG_DNSPRIVACY
&& !nvram_get_int("dnspriv_enable")
if (nvram_get_int("dnspriv_enable") && nvram_get_int("dnssec_enable")) {
fprintf(fp, "proxy-dnssec\n");
} else
#endif
) {
if (nvram_get_int("dnssec_enable")) {
fprintf(fp, "trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5\n"
"trust-anchor=.,20326,8,2,E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D\n"
"dnssec\n");
@@ -1729,7 +1730,6 @@ void start_dnsmasq(void)

if (nvram_match("dnssec_check_unsigned_x", "0"))
fprintf(fp, "dnssec-check-unsigned=no\n");

}
#endif
if (nvram_match("dns_norebind", "1"))
@@ -1883,7 +1883,7 @@ void start_stubby(void)

#ifdef RTCONFIG_DNSSEC
/* DNSSEC settings */
if (nvram_get_int("dnssec_enable")) {
if (nvram_get_int("dnssec_enable") && tls_possible) {
fprintf(fp,
"dnssec_return_status: GETDNS_EXTENSION_TRUE\n");
}

0 comments on commit 43c891c

Please sign in to comment.
You can’t perform that action at this time.