Skip to content

Only enable certficates in http module if conf.tls is explicitly true

Jonathan Coetzee requested to merge jono/knot-resolver:http_tls_cert into master

I noticed that even if I didn't have conf.tls set to true I still ended up with cert being generated/rerolled. Looking at the code if conf.tls is set to nil then certificates are set up, including rerolling ephemeral certs even though TLS on the web server itself remains disabled.

Merge request reports