| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: dnscrypt-proxy | Distribution: openSUSE:Factory:zSystems |
| Version: 2.1.7 | Vendor: openSUSE |
| Release: 1.1 | Build date: Sat Jan 11 19:00:00 2025 |
| Group: Productivity/Networking/DNS/Utilities | Build host: reproducible |
| Size: 13989641 | Source RPM: dnscrypt-proxy-2.1.7-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://dnscrypt.info/ | |
| Summary: A tool for securing communications between a client and a DNS resolver | |
A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2, DNS-over-HTTPS, Anonymized DNSCrypt and ODoH (Oblivious DoH).
ISC
* Sat Jan 11 2025 cunix@mail.de
- Update to version 2.1.7
* Reintroduces support for XSalsa20 enryption in DNSCrypt,
which was removed in 2.1.6. Unfortunately, a bunch of servers still
only support that encryption system.
* Added check for lying resolvers was added for DNSCrypt, similar to
the one that was already present for DoH and ODoH.
- Minimum golang version now at 1.23
- With vendored quic-go at 0.48.2 since update to 2.1.6
boo#1222473 and boo#1235156 should be fixed.
- Trimmed long lines in last changelog entry
* Sat Jan 11 2025 Gerald Chen <gerald_chen@foxmail.com>
- Update to version 2.1.6
* Forwarding: in the list of servers for a zone, the `$BOOTSTRAP`
keyword can be included as a shortcut to forward to the bootstrap
servers. And the `$DHCP` keyword can be included to forward to the
DNS resolvers provided by the local DHCP server. Based on work by YX
Hao, thanks! DHCP forwarding should be considered experimental and my
not work on all operating systems. A rule for a zone can mix and
match multiple forwarder types, such as `10.0.0.1,10.0.0.254,$DHCP,
192.168.1.1,$BOOTSTRAP`. Note that this is not implemented for
captive portals yet.
* Lying resolvers are now skipped, instead of just printing an error.
This doesn't apply to captive portal and forwarding entries, which
are the only reasonable use case for lying resolvers.
* Support for XSalsa20 in DNSCrypt has been removed. This was not
documented, and was supserseded by XChaCha20 in 2016.
* Source files are now fetched with compression.
* DNS64: compatibility has been improved.
* Forwarding: the root domain (`.`) can now be forwarded.
* The ARC caching algorithm has been replaced by the SIEVE algorithm.
* Properties of multiple servers are now updated simultaneously. The
concurrency level can be adjusted with the new
`cert_refresh_concurrency` setting. Contributed by YX Hao.
* MSI packages for DNSCrypt can now easily be built.
* New command-line flag: `-include-relays` to include relays in `-list`
and `-list-all`.
* Support for DNS extended error codes has been added.
* Documentation updates, bug fixes, dependency updates.
- Drop quic-go.patch, for dnscrypt-proxy already pulls fixed quic-go v0.48.2
* Sun Apr 21 2024 cunix@mail.de
- added patch quic-go.patch (boo#1222473)
* Mon Feb 05 2024 cunix@mail.de
- use systemd sysusers
* Sun Aug 13 2023 cunix@mail.de - 2.1.5
- Update to version 2.1.5
* Responses to blocked queries now include extended error codes
* Reliability of connections using HTTP/3 has been improved
* New configuration directive: "tls_key_log_file"
to dump TLS secret keys
* Sat Feb 11 2023 cunix@mail.de - 2.1.4
- Update to version 2.1.4
* Fixes a regression from version 2.1.3: when cloaking was enabled,
blocked responses were returned for records that were not A/AAAA/PTR
even for names that were not in the cloaked list.
* Sun Feb 05 2023 cunix@mail.de - 2.1.3
- Update to version 2.1.3
* DNS-over-HTTP/3 (QUIC) should be more reliable. In particular,
version 2.1.2 required another (non-QUIC) resolver to be present for
bootstrapping, or the resolver's IP address to be present in the
stamp. This is not the case any more.
* dnscrypt-proxy is now compatible with Go 1.20+
* Commands (-check, -show-certs, -list, -list-all) now ignore log
files and directly output the result to the standard output.
* The "cert_ignore_timestamp" configuration switch is now documented.
It allows ignoring timestamps for DNSCrypt certificate verification,
until a first server is available. This should only be used on devices
that don't have any ways to set the clock before DNS service is up.
However, a safer alternative remains to use an NTP server with a fixed
IP address (such as time.google.com), configured in the captive portals
file.
* Cloaking: when a name is cloaked, unsupported record types now
return a blocked response rather than the actual records.
* systemd: report Ready earlier as dnscrypt-proxy can itself manage
retries for updates/refreshes.
* vendored dependencies updated
* Tue Aug 02 2022 cunix@mail.de - 2.1.2
- Update to version 2.1.2
* Support for DoH over HTTP/3 (DoH3, HTTP over QUIC)
Compatible servers will automatically use it.
Note that QUIC uses UDP
(usually over port 443, like DNSCrypt) instead of TCP.
* fixed memory usage kept growing due to channels not
being properly closed
* DNS64: "CNAME" records are now translated like other responses
* A relay whose name has been configured, but doesn't exist in the
list of available relays is now a hard error
* "dnscrypt-proxy -resolve" now reports if ECS (EDNS-clientsubnet) is
supported by the server
* "dnscrypt-proxy -list" now includes ODoH (Oblivious DoH) servers
* Local DoH: queries made using the "GET" method are now handled
* "PTR" queries are now supported for cloaked domains
- Minimum golang version now at 1.18
* Tue Mar 22 2022 cunix@mail.de
- switched to vendored_licenses_packager as build dependency
* Fri Oct 01 2021 cunix@mail.de - 2.1.1
- Update to version 2.1.1
* Serve cached DoH responses when experiencing connectivity issues.
* Time attributes in allow/block lists were ignored.
* TTL served to clients is now rounded and starts decreasing
before the first query is received.
* Time-based rules are properly handled again in generate-domains-blocklist.
* DoH/ODoH: entries with an IP address and using a non-standard port
should not require help from a bootstrap resolver any more.
/etc/dnscrypt-proxy /etc/dnscrypt-proxy/allowed-ips.txt /etc/dnscrypt-proxy/allowed-names.txt /etc/dnscrypt-proxy/blocked-ips.txt /etc/dnscrypt-proxy/blocked-names.txt /etc/dnscrypt-proxy/captive-portals.txt /etc/dnscrypt-proxy/cloaking-rules.txt /etc/dnscrypt-proxy/dnscrypt-proxy.toml /etc/dnscrypt-proxy/dnscrypt-proxy.toml.default /etc/dnscrypt-proxy/forwarding-rules.txt /usr/lib/systemd/system/dnscrypt-proxy-resolvconf.service /usr/lib/systemd/system/dnscrypt-proxy.service /usr/lib/systemd/system/dnscrypt-proxy.socket /usr/lib/sysusers.d/dnscrypt.conf /usr/sbin/dnscrypt-proxy /usr/sbin/rcdnscrypt-proxy /usr/sbin/rcdnscrypt-proxy-resolvconf /usr/share/dnscrypt-proxy /usr/share/dnscrypt-proxy/generate-domains-blocklist /usr/share/dnscrypt-proxy/generate-domains-blocklist/domains-allowlist.txt /usr/share/dnscrypt-proxy/generate-domains-blocklist/domains-blocklist-local-additions.txt /usr/share/dnscrypt-proxy/generate-domains-blocklist/domains-blocklist.conf /usr/share/dnscrypt-proxy/generate-domains-blocklist/domains-time-restricted.txt /usr/share/dnscrypt-proxy/generate-domains-blocklist/generate-domains-blocklist.py /usr/share/doc/packages/dnscrypt-proxy /usr/share/doc/packages/dnscrypt-proxy/ChangeLog /usr/share/doc/packages/dnscrypt-proxy/README.md /usr/share/doc/packages/dnscrypt-proxy/README.openSUSE /usr/share/doc/packages/dnscrypt-proxy/dnscrypt-proxy.socket.conf /usr/share/doc/packages/dnscrypt-proxy/dnscrypt-proxy.toml.default /usr/share/doc/packages/dnscrypt-proxy/example-allowed-ips.txt /usr/share/doc/packages/dnscrypt-proxy/example-allowed-names.txt /usr/share/doc/packages/dnscrypt-proxy/example-blocked-ips.txt /usr/share/doc/packages/dnscrypt-proxy/example-blocked-names.txt /usr/share/doc/packages/dnscrypt-proxy/example-captive-portals.txt /usr/share/doc/packages/dnscrypt-proxy/example-cloaking-rules.txt /usr/share/doc/packages/dnscrypt-proxy/example-dnscrypt-proxy.toml /usr/share/doc/packages/dnscrypt-proxy/example-forwarding-rules.txt /usr/share/licenses/dnscrypt-proxy /usr/share/licenses/dnscrypt-proxy/LICENSE /usr/share/licenses/dnscrypt-proxy/vendored /usr/share/licenses/dnscrypt-proxy/vendored/github.com__BurntSushi__toml__COPYING /usr/share/licenses/dnscrypt-proxy/vendored/github.com__VividCortex__ewma__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__coreos__go-systemd__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__coreos__go-systemd__NOTICE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__davecgh__go-spew__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__dchest__safefile__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__go-task__slim-sprig__v3__LICENSE.txt /usr/share/licenses/dnscrypt-proxy/vendored/github.com__golang__protobuf__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__google__pprof__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__hashicorp__go-immutable-radix__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__hashicorp__go-syslog__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__hashicorp__golang-lru__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__hectane__go-acl__LICENSE.txt /usr/share/licenses/dnscrypt-proxy/vendored/github.com__jedisct1__dlog__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__jedisct1__go-clocksmith__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__jedisct1__go-dnsstamps__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__jedisct1__go-hpke-compact__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__jedisct1__go-minisign__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__jedisct1__xsecretbox__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__k-sone__critbitgo__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__kardianos__service__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__lifenjoiner__dhcpdns__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__miekg__dns__COPYRIGHT /usr/share/licenses/dnscrypt-proxy/vendored/github.com__miekg__dns__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__onsi__ginkgo__v2__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__opencoff__go-sieve__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__pkg__errors__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__pmezard__go-difflib__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__powerman__check__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__powerman__deepequal__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__powerman__deepequal__LICENSE-go /usr/share/licenses/dnscrypt-proxy/vendored/github.com__quic-go__qpack__LICENSE.md /usr/share/licenses/dnscrypt-proxy/vendored/github.com__quic-go__quic-go__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/github.com__smartystreets__goconvey__LICENSE.md /usr/share/licenses/dnscrypt-proxy/vendored/go.uber.org__mock__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__crypto__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__crypto__PATENTS /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__exp__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__exp__PATENTS /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__mod__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__mod__PATENTS /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__net__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__net__PATENTS /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__sync__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__sync__PATENTS /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__sys__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__sys__PATENTS /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__text__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__text__PATENTS /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__tools__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/golang.org__x__tools__PATENTS /usr/share/licenses/dnscrypt-proxy/vendored/google.golang.org__genproto__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/google.golang.org__grpc__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/google.golang.org__grpc__NOTICE.txt /usr/share/licenses/dnscrypt-proxy/vendored/google.golang.org__protobuf__LICENSE /usr/share/licenses/dnscrypt-proxy/vendored/google.golang.org__protobuf__PATENTS /usr/share/licenses/dnscrypt-proxy/vendored/gopkg.in__natefinch__lumberjack.v2__LICENSE /var/lib/dnscrypt-proxy /var/log/dnscrypt-proxy
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Jan 29 02:28:24 2025