From 220dd8f892ee3f0864ea13838642bc40a574dcb5 Mon Sep 17 00:00:00 2001 From: Christian Hesse Date: Tue, 13 Sep 2022 09:01:40 +0200 Subject: netwatch-dns: support downloading / importing certificate --- doc/netwatch-dns.md | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'doc/netwatch-dns.md') diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md index e8caaa1..65d0488 100644 --- a/doc/netwatch-dns.md +++ b/doc/netwatch-dns.md @@ -43,6 +43,13 @@ Giving a specific query url for DoH is possible: Note that using a name in DoH url may introduce a chicken-and-egg issue! +Importing a certificate automatically is possible, at least if available in +the repository (see `certs` sub directory). + + /tool/netwatch/add comment="doh, doh-cert=DigiCert TLS Hybrid ECC SHA384 2020 CA1" host=1.1.1.1; + /tool/netwatch/add comment="doh, doh-cert=DigiCert TLS Hybrid ECC SHA384 2020 CA1" host=9.9.9.9; + /tool/netwatch/add comment="doh, doh-cert=GTS CA 1C3" host=8.8.8.8; + Sometimes using just one specific (possibly internal) DNS server may be desired, with fallback in case it fails. This is possible as well: -- cgit v1.2.3-54-g00ecf