<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Sorry for the late reply, I had examinations ongoing.
<div><br>
</div>
<div>So I have a certificate and a private key from LE. I've generated the public key for that certificate. Quoting the guide @ https://www.dnsdist.org/guides/dnscrypt.html - "To generate the provider and resolver certificates and keys, you can simply do: ...",
so I issued the two commands, and I expected to find a resolver.cert and a resolver.key, in the /etc/dnsdist directory, or /ssl subdirectory. Those two files in turn will be used for the DNScrypt bind if I understand correctly. However, there are no such files,
and I can confirm that DNSDist has write permissions in that directory. </div>
<div><br>
</div>
Ideas?<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> dnsdist <dnsdist-bounces@mailman.powerdns.com> on behalf of Jacob Bunk Nielsen via dnsdist <dnsdist@mailman.powerdns.com><br>
<b>Sent:</b> Tuesday, December 15, 2020 11:10 AM<br>
<b>To:</b> dnsdist@mailman.powerdns.com <dnsdist@mailman.powerdns.com><br>
<b>Subject:</b> Re: [dnsdist] DNScrypt with DNSDist</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Hi<br>
<br>
I read the list, so no need to write me in person.<br>
<br>
<br>
On 15/12/2020 06.27, Sayan Bhattacharyya wrote:<br>
> [root@t2 ~]# dnsdist -e <br>
> 'generateDNSCryptProviderKeys("/etc/dnsdist/ssl/pub.key", <br>
> "/etc/dnsdist/ssl/t2.xolentum.net.key")' --verbose<br>
> Read configuration from '/etc/dnsdist/dnsdist.conf'<br>
> Adding server to default pool<br>
> Connecting to 127.0.0.1:5199<br>
> Provider fingerprint is: <br>
> 6BEA:CDAB:114C:E2E5:DA96:743F:A6FB:4941:CEF6:B434:9C8B:CA5F:FE44:A9B3:7F23:70C0<br>
><br>
> And tried searching the entire /, no resolver.key or similar file found.<br>
<br>
So you generated a key and put it in a file called t2.xolentum.net.key <br>
and then expect to find a file called resolver.key? How should that work?<br>
<br>
<br>
What ended up in /etc/dnsdist/ssl/ ?<br>
<br>
<br>
Best regards,<br>
<br>
Jacob<br>
<br>
_______________________________________________<br>
dnsdist mailing list<br>
dnsdist@mailman.powerdns.com<br>
<a href="https://mailman.powerdns.com/mailman/listinfo/dnsdist">https://mailman.powerdns.com/mailman/listinfo/dnsdist</a><br>
</div>
</span></font></div>
</body>
</html>