datamodel: forward: server: added 'insecure' config

This commit is related to GitHub issue #123.

Author: alesmrazek

doc/_static/config.schema.json

@@ -1022,6 +1022,11 @@
                                             "description": "Transport protocol for a forward server.",
                                             "default": null
                                         },
+                                        "insecure": {
+                                            "type": "boolean",
+                                            "description": "Allow insecure TLS configuration.",
+                                            "default": false
+                                        },
                                         "pin-sha256": {
                                             "anyOf": [
                                                 {

python/knot_resolver/datamodel/forward_schema.py

@@ -11,13 +11,15 @@ class ForwardServerSchema(ConfigSchema):
     ---
     address: IP address(es) of a forward server.
     transport: Transport protocol for a forward server.
+    insecure: Allow insecure TLS configuration.
     pin_sha256: Hash of accepted CA certificate.
     hostname: Hostname of the Forward server.
     ca_file: Path to CA certificate file.
     """
 
     address: ListOrItem[IPAddressOptionalPort]
     transport: Optional[Literal["tls"]] = None
+    insecure: bool = False
     pin_sha256: Optional[ListOrItem[PinSha256]] = None
     hostname: Optional[DomainName] = None
     ca_file: Optional[ReadableFile] = None

python/knot_resolver/datamodel/templates/macros/forward_macros.lua.j2

@@ -13,6 +13,11 @@ tls=true,
 {%- else -%}
 tls=false,
 {%- endif -%}
+{%- if server.insecure -%}
+insecure=true,
+{%- else -%}
+insecure=false,
+{%- endif -%}
 {%- if server.hostname -%}
 hostname='{{ server.hostname }}',
 {%- endif -%}

tests/manager/datamodel/templates/test_forward_macros.py

@@ -17,7 +17,7 @@ def test_policy_rule_forward_add():
             },
         }
     )
-    result = "policy.rule_forward_add('.',{dnssec=true,auth=false},{{'2001:148f:fffe::1',tls=false,hostname='odvr.nic.cz',},{'185.43.135.1',tls=false,hostname='odvr.nic.cz',},})"
+    result = "policy.rule_forward_add('.',{dnssec=true,auth=false},{{'2001:148f:fffe::1',tls=false,insecure=false,hostname='odvr.nic.cz',},{'185.43.135.1',tls=false,insecure=false,hostname='odvr.nic.cz',},})"
 
     tmpl = template_from_str(tmpl_str)
     assert tmpl.render(rule=rule) == result