diff --git a/stubby-0.3.1-dnssec-ta.patch b/stubby-0.3.1-dnssec-ta.patch index 4694013..6454043 100644 --- a/stubby-0.3.1-dnssec-ta.patch +++ b/stubby-0.3.1-dnssec-ta.patch @@ -1,25 +1,25 @@ -From 81ab1eb15280b99d2384fe4e6b512e79d4b1d543 Mon Sep 17 00:00:00 2001 -From: rpm-build -Date: Fri, 14 Oct 2022 00:34:15 +0200 -Subject: [PATCH] Use trust anchor maintained by unbound-anchor +From 3dc07827ba060247b714efdc00f2fc5617163204 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= +Date: Sat, 15 Oct 2022 14:21:39 +0200 +Subject: [PATCH] Use trust anchor path maintained by unbound-anchor Other packages use it as well. Point to single file, which might be -reused by other packages. +reused by other packages. But keep the path commented out and use by +default just built-in trust anchor. --- - stubby.yml.example | 3 +++ - 1 file changed, 3 insertions(+) + stubby.yml.example | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/stubby.yml.example b/stubby.yml.example -index 1af0468..2296b73 100644 +index 1af0468..b86cd65 100644 --- a/stubby.yml.example +++ b/stubby.yml.example -@@ -172,6 +172,9 @@ listen_addresses: +@@ -171,7 +171,7 @@ listen_addresses: + # Specify the location of the installed trust anchor files to override the # default location (see above) # dnssec_trust_anchors: - # - "/etc/unbound/getdns-root.key" -+# Fedora package maintains it in this location -+dnssec_trust_anchors: -+ - "/var/lib/unbound/root.key" +-# - "/etc/unbound/getdns-root.key" ++# - "/var/lib/unbound/root.key" ################################## UPSTREAMS ################################ diff --git a/stubby.spec b/stubby.spec index 0e1b47c..a557a26 100644 --- a/stubby.spec +++ b/stubby.spec @@ -70,6 +70,7 @@ fi %changelog * Sat Oct 15 2022 Petr Menšík - 0.4.2-2 - Private users do not work with dynamic users +- Provide path to unbound-anchor key, but keep it commented out * Thu Oct 13 2022 Petr Menšík - 0.4.2-1 - Update to 0.4.2 (#1974450)