SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #21628 from yuwata/man-network-dnssec

Browse Source 
man: network: fix default values for DNSSEC= and DNSOverTLS=
This commit is contained in:
Zbigniew Jędrzejewski-Szmek
2021-12-06 08:54:43 +01:00
committed by GitHub
parent 6b12086e1f 472e1349ed
commit 8fc2648454
1 changed files with 15 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/systemd.network.xml
+15 -20
View File
@@ -518,18 +518,14 @@ Table=1234</programlisting></para>
<varlistentry>
<term><varname>DNSOverTLS=</varname></term>
<listitem>
<para>Takes a boolean or <literal>opportunistic</literal>.
When true, enables
<ulink
url="https://tools.ietf.org/html/rfc7858">DNS-over-TLS</ulink>
support on the link.
When set to <literal>opportunistic</literal>, compatibility with
non-DNS-over-TLS servers is increased, by automatically
turning off DNS-over-TLS servers in this case.
This option defines a per-interface setting for
<para>Takes a boolean or <literal>opportunistic</literal>. When true, enables
<ulink url="https://tools.ietf.org/html/rfc7858">DNS-over-TLS</ulink> support on the link.
When set to <literal>opportunistic</literal>, compatibility with non-DNS-over-TLS servers
is increased, by automatically turning off DNS-over-TLS servers in this case. This option
defines a per-interface setting for
<citerefentry><refentrytitle>resolved.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>'s
global <varname>DNSOverTLS=</varname> option. Defaults to
false. This setting is read by
global <varname>DNSOverTLS=</varname> option. Defaults to unset, and the global setting
will be used. This setting is read by
<citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
</listitem>
</varlistentry>
@@ -537,16 +533,15 @@ Table=1234</programlisting></para>
<term><varname>DNSSEC=</varname></term>
<listitem>
<para>Takes a boolean or <literal>allow-downgrade</literal>. When true, enables
<ulink url="https://tools.ietf.org/html/rfc4033">DNSSEC</ulink>
DNS validation support on the link. When set to
<literal>allow-downgrade</literal>, compatibility with
non-DNSSEC capable networks is increased, by automatically
turning off DNSSEC in this case. This option defines a
per-interface setting for
<ulink url="https://tools.ietf.org/html/rfc4033">DNSSEC</ulink> DNS validation support on
the link. When set to <literal>allow-downgrade</literal>, compatibility with non-DNSSEC
capable networks is increased, by automatically turning off DNSSEC in this case. This
option defines a per-interface setting for
<citerefentry><refentrytitle>resolved.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>'s
global <varname>DNSSEC=</varname> option. Defaults to
false. This setting is read by
<citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
global <varname>DNSSEC=</varname> option. Defaults to unset, and the global setting will be
used. This setting is read by
<citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
</para>
</listitem>
</varlistentry>
<varlistentry>