aboutsummaryrefslogtreecommitdiffstats
path: root/doc/netwatch-dns.md
diff options
context:
space:
mode:
authorGravatar Christian Hesse <mail@eworm.de>2022-09-13 09:01:40 +0200
committerGravatar Christian Hesse <mail@eworm.de>2022-09-13 20:28:52 +0200
commit220dd8f892ee3f0864ea13838642bc40a574dcb5 (patch)
treef33f714330aa32bcd376e2aa4cbf112961fead6a /doc/netwatch-dns.md
parent3988c7029096913348ebcc2f2b443c4a85325f8b (diff)
netwatch-dns: support downloading / importing certificate
Diffstat (limited to 'doc/netwatch-dns.md')
-rw-r--r--doc/netwatch-dns.md7
1 files changed, 7 insertions, 0 deletions
diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index e8caaa1..65d0488 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -43,6 +43,13 @@ Giving a specific query url for DoH is possible:
Note that using a name in DoH url may introduce a chicken-and-egg issue!
+Importing a certificate automatically is possible, at least if available in
+the repository (see `certs` sub directory).
+
+ /tool/netwatch/add comment="doh, doh-cert=DigiCert TLS Hybrid ECC SHA384 2020 CA1" host=1.1.1.1;
+ /tool/netwatch/add comment="doh, doh-cert=DigiCert TLS Hybrid ECC SHA384 2020 CA1" host=9.9.9.9;
+ /tool/netwatch/add comment="doh, doh-cert=GTS CA 1C3" host=8.8.8.8;
+
Sometimes using just one specific (possibly internal) DNS server may be
desired, with fallback in case it fails. This is possible as well: