diff options
| author |  Christian Hesse <mail@eworm.de> | 2024-06-20 10:57:16 +0200 |
|---|---|---|
| committer | Christian Hesse <mail@eworm.de> | 2024-06-21 15:57:04 +0200 |
| commit | c4e8d01de19f9c5e1d19c74c010079233c4d4df5 (patch) | |
| tree | a4c4213ade5dde5435c879c5d697798e564f3bbd /doc/netwatch-dns.md | |
| parent | a05efdc07fa912d0d17f4994ee9e892b51030be1 (diff) | |
certs: DigiCert TLS Hybrid ECC SHA384 2020 CA1 -> DigiCert Global Root CA
This is used by Cloudflare DNS Quard9 (9.9.9.9).
$CertificateAvailable "DigiCert Global Root CA";
/ip/dns/set use-doh-server=https://9.9.9.9/dns-query verify-doh-cert=yes;
Diffstat (limited to 'doc/netwatch-dns.md')
| -rw-r--r-- | doc/netwatch-dns.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md index 3d2c6be..9fe486e 100644 --- a/doc/netwatch-dns.md +++ b/doc/netwatch-dns.md @@ -63,7 +63,7 @@ Importing a certificate automatically is possible, at least if available in the repository (see `certs` sub directory). /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root G2" host=1.1.1.1; - /tool/netwatch/add comment="doh, doh-cert=DigiCert TLS Hybrid ECC SHA384 2020 CA1" host=9.9.9.9; + /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root CA" host=9.9.9.9; /tool/netwatch/add comment="doh, doh-cert=GTS Root R1" host=8.8.8.8; Sometimes using just one specific (possibly internal) DNS server may be |