colin/NetworkManager
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

dns: Add resolve-mode and certification-authority keys to global-dns

Browse Source 
Resolve-mode allows user to specify way how the global-dns domains
and DNS connection information should be merged and used.

Certification-authority allows user to specify certification
authority that should be used to verify certificates of encrypted
DNS servers.
This commit is contained in:
Tomas Korbar
2025-01-08 11:21:46 +01:00
parent c9be26cf9a
commit c08ecfd5fe
6 changed files with 154 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
man/NetworkManager.conf.xml
View File

@@ -1547,6 +1547,29 @@ managed=1
</para>
</listitem>
</varlistentry>
<varlistentry>
<term><varname>resolve-mode</varname></term>
<listitem>
<para>
String indicating how DNS servers retrieved from global configuration and connections
should be used. <literal>backup</literal> - Indicates that they can be freely merged
and used for the same purposes. <literal>prefer</literal> - Forbids DNS servers
retrieved from connections to be used for general queries that are not subdomains of
domains set by connection. <literal>exclusive</literal> - Forbids use of connection
DNS servers for any query. Currently relevant only for Dnsconfd plugin.
</para>
</listitem>
</varlistentry>
<varlistentry>
<term><varname>certification-authority</varname></term>
<listitem>
<para>
String specifying absolute path to bundle of CA certificates that must be used for
validation of certificates presented by DNS servers when encrypted DNS is used.
Currently relevant only for Dnsconfd plugin.
</para>
</listitem>
</varlistentry>
</variablelist>
</para>
</refsect1>