[ERROR] Unable to retrieve server certificate about dnscrypt-wrapper

[cofyc]

try build dnscrypt-wrapper with libsodium 1.0?

[wstrm]

Thanks for the reply but I am using version 1.0 already.

[cofyc]

Hi, @willeponken

-a option specifies listen-address (see dnscrypt-wrapper -h), so you should start dnscrypt-wrapper with command like this to listen on 127.0.0.1:5333 (I guest 128.199.56.201:4434 is dns server on internet)

dnscrypt-wrapper -a 127.0.0.1:5333 -r 128.199.56.201:4434 --crypt-secretkey-file=secret.key --crypt-publickey-file=public.key --provider-cert-file=dnscrypt.cert --provider-name=2.dnscrypt-cert.megalicious.org -V

Then, start dnscrypt-proxy to connect to dnscrypt-wrapper with -r 127.0.0.1:5333:

dnscrypt-proxy -a 127.0.0.1:5334 -r 127.0.0.1:5333 --provider-name 2.dnscrypt-cert.megalicious.org --provider-key=8EAE:E1C1:2C9A:F21E:F3C6:A070:B54D:4161:9ACE:61CF:515D:B337:97C0:8B06:1C4D:26E5

• with -a 127.0.0.1:5334 to bind on another port (5333 is used by dnscrypt-wrapper)
• -r is short abbreviation of --resolver-address, they are same

Now, you can test with dig command against with dnscrypt-proxy:

dig www.google.com @127.0.0.1 -p 5334

[cofyc]

Add a example here: https://github.com/Cofyc/dnscrypt-wrapper/tree/master/example

[wstrm]

Perfect! Thanks.