mirror of
https://github.com/systemd/systemd.git
synced 2026-08-11 09:36:28 +00:00
dnstls_stream_connect_tls() reads the manager-wide dns_over_tls_mode field directly, so when the global mode was 'no' or 'opportunistic' but a link was configured with strict DNSOverTLS=yes, the DoT connection was established without SSL_VERIFY_PEER or hostname/IP checks. Use dns_server_get_dns_over_tls_mode() which honours the per-link override. (cherry picked from commit052ff5fb5d) (cherry picked from commitc4e5f003ed) (cherry picked from commit0c52e1c221)