search

DNSCrypt / dnscrypt-website

DNSCrypt website
https://dnscrypt.info
MIT License
60 stars 18 forks source link

Unsupported / invalid stamp generated? #28

Closed PeterDaveHello closed 2 years ago

PeterDaveHello commented 2 years ago

Hi @jedisct1,

Recently I tried to generate some DNS stamps for certain DNS-over-TLS services using the Online DNS Stamp calculator on the website, for example, RethinkDNS(hostname: max.rethinkdns.com), but when I put the stamp in DNSCrypt proxy config(dnscrypt-proxy.toml) like this:

  [static.'rethinkdns']                                                                                                                                                                                                                     
  stamp = 'sdns://AwAAAAAAAAAAAAASbWF4LnJldGhpbmtkbnMuY29t'

or this:

  [static.'rethinkdns']                                                                                                                                                                                                                     
  stamp = 'sdns://AwAAAAAAAAAADjIxMy4xODguMjE4Ljg1ABJtYXgucmV0aGlua2Rucy5jb20'

A fatal error just came up:

[2022-01-31 16:13:29] [FATAL] Stamp error for the static [rethinkdns] definition: [Unsupported stamp version or protocol]

The version of DNSCrypt proxy is the latest v2.1.1, do you have any idea or suggestions on what might be wrong Thanks a lot!

PeterDaveHello commented 2 years ago

@jedisct1 maybe you can help with this issue? Thanks.

jedisct1 commented 2 years ago

Not sure what the problem is?

dnscrypt-proxy doesn't support DoT, but the stamp looks correct.

jedisct1 commented 2 years ago 
$ dnslookup example.com sdns://AwAAAAAAAAAADjIxMy4xODguMjE4Ljg1ABJtYXgucmV0aGlua2Rucy5jb20

;; ANSWER SECTION:
example.com.    82704   IN  A   93.184.216.34
PeterDaveHello commented 2 years ago

Oh, that's my bad 🙈 Must recall it wrong that I think DoT is supported, sorry!