Updated Local DoH (markdown)

szemley 2021-01-09 14:23:46 +00:00
parent c5df337198
commit 1a5fa4452a

@ -11,9 +11,7 @@ openssl req -x509 -nodes -newkey rsa:2048 -days 5000 -sha256 -keyout \
localhost.pem -out localhost.pem
```
During generating a RSA private key, you will be aksed to answer various questions (`Country Name`, `Organization Name`, `Email Address` and so on).
However, these input fields can be empty or left to their default value.
During generating a RSA private key, you will be aksed to answer various questions (`Country Name`, `Organization Name`, `Email Address` and so on). However, these input fields can be empty or left to their default value.
Next, edit the configuration file, look for the `local_doh` section and uncomment the relevant lines:
@ -27,7 +25,7 @@ cert_key_file = "localhost.pem"
The path to the `localhost.pem` file should be set in the `cert_file` and `cert_key_file` properties of the `dnscrypt-proxy.toml` configuration file. Also make sure that `localhost.pem` is readable by the `dnscrypt-proxy` user.
Now, `dnscrypt-proxy` should be restarted. With the settings above, the URL of the local DoH server would be `https://127.0.0.1:3000/dns-query`. Here is a small exception of the system logs:
Now, `dnscrypt-proxy` should be restarted. With the settings above, the URL of the local DoH server would be `https://127.0.0.1:3000/dns-query`. Here is a small exception of the system logs/status:
```text
[NOTICE] Now listening to https://127.0.0.1:3000/dns-query [DoH]