From 5b8e7d41149d34151fb6ecceaf4c725c5ba887b7 Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Fri, 14 Apr 2023 23:08:10 +0200 Subject: [PATCH] Use the same command as on the wiki to create a local DoH cert --- dnscrypt-proxy/example-dnscrypt-proxy.toml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/dnscrypt-proxy/example-dnscrypt-proxy.toml b/dnscrypt-proxy/example-dnscrypt-proxy.toml index 68cefce6..e676d437 100644 --- a/dnscrypt-proxy/example-dnscrypt-proxy.toml +++ b/dnscrypt-proxy/example-dnscrypt-proxy.toml @@ -463,9 +463,8 @@ cache_neg_max_ttl = 600 ## Certificate file and key - Note that the certificate has to be trusted. -## Can be generated using the following commands: -## openssl genpkey -genparam -algorithm ec -pkeyopt ec_paramgen_curve:P-256 -out ECPARAM.pem -## openssl req -x509 -nodes -newkey ec:ECPARAM.pem -subj "/C=XZ/L=own PC/O=localhost/CN=localhost/" -days 5000 -sha256 -keyout localhost.pem -out localhost.pem +## Can be generated using the following command: +## openssl req -x509 -nodes -newkey rsa:2048 -days 5000 -sha256 -keyout localhost.pem -out localhost.pem ## See the documentation (wiki) for more information. # cert_file = 'localhost.pem'