Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Error when saving DNS Resolver configuration

    Scheduled Pinned Locked Moved DHCP and DNS
    7 Posts 4 Posters 1.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      gibbsy81
      last edited by

      Hi All,

      I am currently running Pfsense with the DNS Resolver feature.
      I have noticed that Unbound has crashed and will not restart when trying to apply any configuration changes i receive the following error.

      The following input errors were detected:

      The generated config file cannot be parsed by unbound. Please correct the following errors:
      /var/unbound/test/unbound_server.pem: No such file or directory
      [1580637057] unbound-checkconf[94278:0] fatal error: server-cert-file: "/var/unbound/test/unbound_server.pem" does not exist

      I have tried so far.

      Restarting Pfsense
      Copying /var/unbound/unbound_server.pem to /var/unbound/test/
      Updating Pfsense to the build 2.4.5-RC build.

      Updating to the 2.4.5-RC build did fix the issue for a little while however not for long.

      Please let me know if you need any further info.
      Thanks in advance.

      1 Reply Last reply Reply Quote 0
      • G
        gibbsy81
        last edited by

        I should also note that manually starting unbound doesn't resolve the issue.

        1 Reply Last reply Reply Quote 0
        • RonpfSR
          RonpfS
          last edited by RonpfS

          @gibbsy81 said in Error when saving DNS Resolver configuration:

          unbound_server.pem

          Search feature will help you :
          https://forum.netgate.com/search?term=unbound_server.pem&in=titlesposts

          2.4.5-RELEASE-p1 (amd64)
          Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
          Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

          G 1 Reply Last reply Reply Quote 0
          • G
            gibbsy81 @RonpfS
            last edited by

            @RonpfS

            Thanks for your reply I have already looked through other threads on these forums and tried their solutions. Unfortunately they haven't worked either.

            1 Reply Last reply Reply Quote 0
            • RonpfSR
              RonpfS
              last edited by RonpfS

              So you stop unbound, remove unbound_server.key, unbound_control.key, unbound_server.pem, unbound_control.pem, Save DNS Server settings, Apply
              That should generate the files then start unbound.

              2.4.5-RELEASE-p1 (amd64)
              Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
              Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                So your trying to get unbound to listen on TLS?

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • brightwolfB
                  brightwolf
                  last edited by

                  I had precisely the same problem. It occurred to me that /var/ was 100% full. A simple reboot cleared out /var/ and after that I could save and apply DNS Resolver again.

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.