Feeling obliged to give a shout to the guys behind @opnsense! What an absolute pleasure to work with, their ethos, their dedication, they can code too :)
#opnsense#opensource#freebsd#coding
If you rely on Unbound DoT make sure to grab 24.7.10_1 in order not see server verification fail. Bandaid is applied, but looking into root cause between Unbound and OpenSSL already.