diff options
| author |   florian <florian@openbsd.org> | 2019-02-07 17:54:01 +0000 |
|---|---|---|
| committer | florian <florian@openbsd.org> | 2019-02-07 17:54:01 +0000 |
| commit | d5f09c0576de80fd5f7fa06aa1942b19654a699d (patch) | |
| tree | 45d73263fc471f2c5a4d7501e47c0156f7d2cbc0 /lib/libssl/ssl_transcript.c | |
| parent | Rewrite trust anchor handling. (diff) | |
| download | wireguard-openbsd-d5f09c0576de80fd5f7fa06aa1942b19654a699d.tar.xz wireguard-openbsd-d5f09c0576de80fd5f7fa06aa1942b19654a699d.zip | |
No need to run unbound-anchor anymore. Unwind(8) handles the bootstrap
correctly itself now. At leat considering the end of life times of
OpenBSD releases and the speed at which the root key signing key (KSK)
rolls.
On the other hand, unbound-anchor assumes a certain network quality
which we cannot guarantee in places where we want to run unwind(8).
This in turn can lead to unbound-anchor stalling the boot process.
Diffstat (limited to 'lib/libssl/ssl_transcript.c')
0 files changed, 0 insertions, 0 deletions