On 08/10/2019 11.37, Milan Jeskynka Kazatel wrote:
> I upgrade the HTTP module in /usr/lib64/knot-resolver/kres_modules/ from
> Github source https://github.com/CZ-NIC/knot-resolver
> (https://github.com/CZ-NIC/knot-resolver)
>
Please don't do that. Mixing source files and packages is usually a
really bad idea. And the http.lua.in file is a template that needs some
further modifications by our build system.
Just reinstall knot-resolver and knot-resolver-module-http package,
ensure it's the correct version by:
rpm -qa | grep knot-resolver
And if that doesn't work, there might some some issue with our packages.
> -- interfaces
> ...
> net.listen('10.0.0.1', 8453, { kind = 'webmgmt' })
>
> -- load HTTP module with defaults (self-signed TLS cert)
>
> modules.load('http')
>
> http.config()
>
> -- Load Useful modules
>
> modules = {
>
> 'policy', -- Block queries to local zones/bad sites
>
> 'view', -- Handle requests by source IP
>
> 'stats', -- Track internal statistics
>
> 'hints', -- Add static records to resolver
>
> }
This config works for me when I have the latest versions of both
knot-resolver and knot-resolver-module-http packages on CentOS7.
--
Tomas Krizek
PGP: 4A8B A48C 2AED 933B D495 C509 A1FB A5F7 EF8C 4869