From 26f086b562d5d07fa1ff818fc08cc3ffb03d3f47 Mon Sep 17 00:00:00 2001 From: Daniel Jakots Date: Thu, 1 Jun 2017 17:20:50 -0400 Subject: [PATCH] enable dnssec validation --- unbound/templates/unbound.conf.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unbound/templates/unbound.conf.j2 b/unbound/templates/unbound.conf.j2 index baf80564..44f8ba41 100644 --- a/unbound/templates/unbound.conf.j2 +++ b/unbound/templates/unbound.conf.j2 @@ -15,7 +15,7 @@ server: # root-hints: "/var/unbound/etc/named.cache" # Uncomment to enable DNSSEC validation. - #auto-trust-anchor-file: "/var/unbound/db/root.key" + auto-trust-anchor-file: "/var/unbound/db/root.key" # Serve zones authoritatively from Unbound to resolver clients. # Not for external service.