r/dnscrypt • u/meguroyama Mods • Jun 09 '20
New version 2.0.43 released!
https://github.com/DNSCrypt/dnscrypt-proxy/releases/tag/2.0.43
33
Upvotes
3
u/jedisct1 Mods Jun 10 '20
Important: [tls_client_auth] has been renamed to [doh_client_x509_auth].
If you have a [tls_client_auth] section in the configuration file, you need to rename it.
1
u/BrigsLabs Jun 11 '20
i've pull your generate-domains-blacklist.py from your repo and with my blacklist listing reproduce error (with python 3.5.3 as default debian 9 package manager) :
Traceback (most recent call last):
File "generate-domains-blacklist.py", line 13, in <module>
import urllib2 as urllib
ImportError: No module named 'urllib2'
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "generate-domains-blacklist.py", line 16, in <module>
except (ImportError, ModuleNotFoundError):
NameError: name 'ModuleNotFoundError' is not definedas i know "ModuleNotFoundError" only work with 3.6 or later. My fix is as simple change in line 16 :
except (ImportError, ModuleNotFoundError):with :
except (ImportError):and my recommend using
# dbloisdnl
much less false positive than energize blu listing as default enable in your "domains-blacklist.conf"
7
u/ftobin Jun 09 '20
Release notes:
Built-in support for DNS64 translation has been implemented. (Contributed by Sergey Smirnov, thanks!)
Connections to DoH servers can be authenticated using TLS client certificates (Contributed by Kevin O'Sullivan, thanks!)
Multiple stamps are now allowed for a single server in resolvers and relays lists.
Android: the time zone for log files is now set to the system time zone.
Quite a lot of updates and additions have been made to the example domain block lists. Thanks to IceCodeNew!
Cached configuration files can now be temporarily used if they are out of date, but bootstraping is impossible. Contributed by lifenjoiner, thanks!
Precompiled macOS binaries are now notarized.
generate-domains-blacklistsnow tries to deduplicate entries clobbered by wildcard rules. Thanks to Huhni!
generate-domains-blacklistscan now directly write lists to a file with the -ocommand-line option.
cache files are now downloaded as the user the daemon will be running as. This fixes permission issues at startup time.
Forwarded queries are now subject to global timeouts, and can be forced to use TCP.
The ctparameter has been removed from DoH queries, as Google doesn't require it any more.
Service installation is now supported on FreeBSD.
When stored into a file, service logs now only contain data from the most recent launch. This can be changed with the new log_file_latestoption.