diff --git a/dnscrypt-proxy-2.1.1.tar.gz b/dnscrypt-proxy-2.1.1.tar.gz deleted file mode 100644 index aae8130..0000000 --- a/dnscrypt-proxy-2.1.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:cc4a2f274ce48c3731ff981e940e6475d912fb356a80481e91725e81d67bde14 -size 6114345 diff --git a/dnscrypt-proxy-2.1.2.tar.gz b/dnscrypt-proxy-2.1.2.tar.gz new file mode 100644 index 0000000..7a1a91f --- /dev/null +++ b/dnscrypt-proxy-2.1.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:aa55fd52b9c1b983405bf98b42ec754f5d6f59b429ba9c98115df617eef5dea4 +size 6792121 diff --git a/dnscrypt-proxy.changes b/dnscrypt-proxy.changes index 164055f..c9c6350 100644 --- a/dnscrypt-proxy.changes +++ b/dnscrypt-proxy.changes @@ -1,3 +1,24 @@ +------------------------------------------------------------------- +Tue Aug 2 12:00:00 UTC 2022 - cunix@mail.de - 2.1.2 + +- Update to version 2.1.2 + * Support for DoH over HTTP/3 (DoH3, HTTP over QUIC) + Compatible servers will automatically use it. + Note that QUIC uses UDP + (usually over port 443, like DNSCrypt) instead of TCP. + * fixed memory usage kept growing due to channels not + being properly closed + * DNS64: "CNAME" records are now translated like other responses + * A relay whose name has been configured, but doesn't exist in the + list of available relays is now a hard error + * "dnscrypt-proxy -resolve" now reports if ECS (EDNS-clientsubnet) is + supported by the server + * "dnscrypt-proxy -list" now includes ODoH (Oblivious DoH) servers + * Local DoH: queries made using the "GET" method are now handled + * "PTR" queries are now supported for cloaked domains + +- Minimum golang version now at 1.18 + ------------------------------------------------------------------- Wed Mar 22 12:00:00 UTC 2022 - cunix@mail.de diff --git a/dnscrypt-proxy.spec b/dnscrypt-proxy.spec index 3a87b34..fc4dfce 100644 --- a/dnscrypt-proxy.spec +++ b/dnscrypt-proxy.spec @@ -24,7 +24,7 @@ %define services %{name}.socket %{name}.service %{name}-resolvconf.service Name: dnscrypt-proxy -Version: 2.1.1 +Version: 2.1.2 Release: 0 Summary: A tool for securing communications between a client and a DNS resolver License: ISC @@ -44,7 +44,7 @@ BuildRequires: golang-packaging BuildRequires: pkgconfig BuildRequires: shadow BuildRequires: systemd-rpm-macros -BuildRequires: golang(API) >= 1.16 +BuildRequires: golang(API) >= 1.18 BuildRequires: pkgconfig(libsystemd) BuildRequires: vendored_licenses_packager # For systemd pidfile solution. diff --git a/example-dnscrypt-proxy.toml.sed b/example-dnscrypt-proxy.toml.sed index 280fe5f..4679a0b 100644 --- a/example-dnscrypt-proxy.toml.sed +++ b/example-dnscrypt-proxy.toml.sed @@ -12,22 +12,22 @@ s/# cloaking_rules = 'cloaking-rules.txt'/# cloaking_rules = '\/etc\/dnscrypt-pr s/# map_file = 'example-captive-portals.txt'/# map_file = '\/etc\/dnscrypt-proxy\/captive-portals.txt'/ s/# cert_file = 'localhost.pem'/# cert_file = '\/etc\/dnscrypt-proxy\/localhost.pem'/ s/# cert_key_file = 'localhost.pem'/# cert_key_file = '\/etc\/dnscrypt-proxy\/localhost.pem'/ -s/ # file = 'query.log'/ # file = '\/var\/log\/dnscrypt-proxy\/query.log'/ -s/ # file = 'nx.log'/ # file = '\/var\/log\/dnscrypt-proxy\/nx.log'/ -s/ # blocked_names_file = 'blocked-names.txt'/ # blocked_names_file = '\/etc\/dnscrypt-proxy\/blocked-names.txt'/ -s/ # log_file = 'blocked-names.log'/ # log_file = '\/var\/log\/dnscrypt-proxy\/blocked-names.log'/ -s/ # blocked_ips_file = 'blocked-ips.txt'/ # blocked_ips_file = '\/etc\/dnscrypt-proxy\/blocked-ips.txt'/ -s/ # log_file = 'blocked-ips.log'/ # log_file = '\/var\/log\/dnscrypt-proxy\/blocked-ips.log'/ -s/ # allowed_names_file = 'allowed-names.txt'/ # allowed_names_file = '\/etc\/dnscrypt-proxy\/allowed-names.txt'/ -s/ # log_file = 'allowed-names.log'/ # log_file = '\/var\/log\/dnscrypt-proxy\/allowed-names.log'/ -s/ # allowed_ips_file = 'allowed-ips.txt'/ # allowed_ips_file = '\/etc\/dnscrypt-proxy\/allowed-ips.txt'/ -s/ # log_file = 'allowed-ips.log'/ # log_file = '\/var\/log\/dnscrypt-proxy\/allowed-ips.log'/ +s/# file = 'query.log'/# file = '\/var\/log\/dnscrypt-proxy\/query.log'/ +s/# file = 'nx.log'/# file = '\/var\/log\/dnscrypt-proxy\/nx.log'/ +s/# blocked_names_file = 'blocked-names.txt'/# blocked_names_file = '\/etc\/dnscrypt-proxy\/blocked-names.txt'/ +s/# log_file = 'blocked-names.log'/# log_file = '\/var\/log\/dnscrypt-proxy\/blocked-names.log'/ +s/# blocked_ips_file = 'blocked-ips.txt'/# blocked_ips_file = '\/etc\/dnscrypt-proxy\/blocked-ips.txt'/ +s/# log_file = 'blocked-ips.log'/# log_file = '\/var\/log\/dnscrypt-proxy\/blocked-ips.log'/ +s/# allowed_names_file = 'allowed-names.txt'/# allowed_names_file = '\/etc\/dnscrypt-proxy\/allowed-names.txt'/ +s/# log_file = 'allowed-names.log'/# log_file = '\/var\/log\/dnscrypt-proxy\/allowed-names.log'/ +s/# allowed_ips_file = 'allowed-ips.txt'/# allowed_ips_file = '\/etc\/dnscrypt-proxy\/allowed-ips.txt'/ +s/# log_file = 'allowed-ips.log'/# log_file = '\/var\/log\/dnscrypt-proxy\/allowed-ips.log'/ s/ cache_file = 'public-resolvers.md'/ cache_file = '\/var\/lib\/dnscrypt-proxy\/public-resolvers.md'/ s/ cache_file = 'relays.md'/ cache_file = '\/var\/lib\/dnscrypt-proxy\/relays.md'/ s/ # cache_file = 'odoh-servers.md'/ # cache_file = '\/var\/lib\/dnscrypt-proxy\/odoh-servers.md'/ s/ # cache_file = 'odoh-relays.md'/ # cache_file = '\/var\/lib\/dnscrypt-proxy\/odoh-relays.md'/ s/ # cache_file = 'quad9-resolvers.md'/ # cache_file = '\/var\/lib\/dnscrypt-proxy\/quad9-resolvers.md'/ -s/ # cache_file = 'parental-control.md'/ # cache_file = '\/var\/lib\/dnscrypt-proxy\/parental-control.md'/ +s/ # cache_file = 'parental-control.md'/ # cache_file = '\/var\/lib\/dnscrypt-proxy\/parental-control.md'/ # package directory instead of source code directory s/## `utils\/generate-domains-blocklists` directory of the dnscrypt-proxy source code./## '\/usr\/share\/dnscrypt-proxy\/generate-domains-blocklists' directory./