8 Říj
2019
8 Říj
'19
11:48
On 08/10/2019 11.37, Milan Jeskynka Kazatel wrote:
I upgrade the HTTP module
in /usr/lib64/knot-resolver/kres_modules/ from
Github source https://github.com/CZ-NIC/knot-resolver
(https://github.com/CZ-NIC/knot-resolver)
Please don't do that. Mixing source files and packages is usually a
really bad idea. And the http.lua.in file is a template that needs some
further modifications by our build system.
Just reinstall knot-resolver and knot-resolver-module-http package,
ensure it's the correct version by:
rpm -qa | grep knot-resolver
And if that doesn't work, there might some some issue with our packages.
-- interfaces
...
net.listen('10.0.0.1', 8453, { kind = 'webmgmt' })
-- load HTTP module with defaults (self-signed TLS cert)
modules.load('http')
http.config()
-- Load Useful modules
modules = {
'policy', -- Block queries to local zones/bad sites
'view', -- Handle requests by source IP
'stats', -- Track internal statistics
'hints', -- Add static records to resolver
}
This config works for me when I have the latest versions of both
knot-resolver and knot-resolver-module-http packages on CentOS7.
--
Tomas Krizek
PGP: 4A8B A48C 2AED 933B D495 C509 A1FB A5F7 EF8C 4869