Files
freeipa/install/share
Antonio Torres 3de127433c Add DNS over TLS support
Add DNS over TLS support using Unbound as a local resolver. This
includes new options on both server and client side.

* `--dns-over-tls`: enable DNS over TLS support. This option is present
  on both client and server. It deploys Unbound and configures BIND on
the server to receive DoT requests.
* `--dot-forwarder`: the upstream DNS server with DoT support. It must
  be specified in the format `1.2.3.4#dns.server.test`
* `--dns-over-tls-key` and `--dns-over-tls-cert`: in case user prefers
  to have the DoT certificate in BIND generated by themselves. If these
  are empty, IPA CA is used instead to request a new certificate.

Signed-off-by: Antonio Torres <antorres@redhat.com>
Reviewed-By: Francisco Trivino <ftrivino@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Varun Mylaraiah <mvarun@redhat.com>
Reviewed-By: Pavel Brezina <pbrezina@redhat.com>
2025-02-11 09:09:22 +01:00
..
2013-11-18 16:54:21 +01:00
2014-10-21 12:23:03 +02:00
2014-07-01 13:57:06 +02:00
2015-05-26 11:59:47 +00:00
2021-07-09 09:47:30 -04:00
2021-06-16 10:28:17 -04:00
2019-01-15 14:29:22 -05:00
2022-06-10 14:50:07 +02:00
2015-05-26 11:59:47 +00:00
2017-02-15 07:13:37 +01:00
2019-04-10 13:43:23 +02:00
2024-08-28 15:48:27 -04:00
2015-05-26 11:59:47 +00:00
2021-07-09 09:47:30 -04:00
2017-02-15 07:13:37 +01:00
2020-07-30 11:38:25 +02:00
2015-09-17 14:55:54 +02:00
2021-04-07 11:43:23 +03:00