Files
systemd/test
Luca Boccassi a94c15302e resolved: honour per-link DNSOverTLS=yes for certificate verification
dnstls_stream_connect_tls() reads the manager-wide dns_over_tls_mode
field directly, so when the global mode was 'no' or 'opportunistic' but
a link was configured with strict DNSOverTLS=yes, the DoT connection
was established without SSL_VERIFY_PEER or hostname/IP checks.
Use dns_server_get_dns_over_tls_mode() which honours the per-link
override.

(cherry picked from commit 052ff5fb5d)
(cherry picked from commit c4e5f003ed)
(cherry picked from commit 0c52e1c221)
2026-07-23 23:03:24 +01:00
..
2025-08-20 16:17:11 +09:00
2026-02-26 10:24:31 +00:00
2025-12-07 09:09:03 +09:00