DNS Over TLS Broken

[chemlud]

...works just fine and stable here for years. Why complain?

[DEC670airp414user]

https://docs.quad9.net/Setup_Guides/Open-Source_Routers/OPNsense_%28Encrypted%29/

is the attached how you have it configured?

I have clean browsing, nextdns, and quad 9 configured.    but if I enable all 3 at once I've noticed a lot of times dns reporting STOPS.  and queries fail.    if I just enable one server I never have an issue.
this is on opnsense hardware and the business version.   

[phantomsfbw]

I tried just one server of Quad9 as well.  Also tried other DNS providers.  Decided to give IPFire a shot as I needed to start over from scratch,and it has been awhile, which does say great things about OPNSense, just decided to try something different for a bit.  Thanks again to all for the assistance, see you back sometime.

[yuusou]

Hi,

I've run into the same issue immediately after rebooting right after updating to 24.7.10.
I also thought it could be due to NTP, so I've set the primary NTP server to the IP of 0.opnsense.pool.ntp.org (95.211.123.72), restarted ntp server, reenabled DoT and restarted unbount, but continue to have the same error.

Code Select Expand

2024-12-03T15:35:56 Error unbound [41231:2] error: ssl handshake cert error: unable to get local issuer certificate
2024-12-03T15:35:56 Error unbound [41231:2] error: and additionally crypto error:0A000086:SSL routines::certificate verify failed
2024-12-03T15:35:56 Error unbound [41231:2] error: and additionally crypto error:80000002:system library::No such file or directory
2024-12-03T15:35:56 Error unbound [41231:2] error: and additionally crypto error:16000069:STORE routines::unregistered scheme
2024-12-03T15:35:56 Error unbound [41231:2] error: and additionally crypto error:80000002:system library::No such file or directory
2024-12-03T15:35:56 Error unbound [41231:2] error: and additionally crypto error:16000069:STORE routines::unregistered scheme
2024-12-03T15:35:56 Error unbound [41231:2] error: and additionally crypto error:80000002:system library::No such file or directory
2024-12-03T15:35:56 Error unbound [41231:2] error: ssl handshake failed crypto error:16000069:STORE routines::unregistered scheme
2024-12-03T15:35:56 Notice unbound [41231:2] notice: ssl handshake failed 9.9.9.9 port 853

[franco]

Let's stay on topic in https://forum.opnsense.org/index.php?topic=44414.0 for the 24.7.10 behaviour.