Re: dnsdist and DoH

Remi Gacogne <[email protected]> Wed, 12 Jun 2019 12:14:54 +0200
Newsgroups gmane.network.dns.powerdns.devel
Message-ID <[email protected]>
Hi!

On 6/12/19 11:58 AM, Pieter Lexis wrote:
>> hmmm ... maybe it is not compiled in? 
> 
> `dnsdist --version` should show whether or not DoH support is available.
> 
>>> showDOHFrontends()
>> DNS over HTTPS support is not present!
>>
>>
>> I followed the ubuntu 16.04 dnsdist to install dnsdist
> 
> Ubuntu 16.04 does not have libwslay (a dependency of libh2o)
> and hence no DoH is available there. Please switch to a more modern
> Ubuntu (like 18.04) to get DoH. Or compile libh2o and any missing
> dependencies for 16.04 yourself to get DoH working.
> 
>> Definitely is the correct config file. 
> 
> `addDOHLocal` should log "DNS over HTTPS support is not present!" when
> starting dnsdist when this support is not present.

Once [1] is merged dnsdist will refuse to start if you ask for DoT or
DoH and it has not been compiled in. It will also be properly reported
when run with --check.
The current behavior was not helpful at all, sorry about that!


[1]: https://github.com/PowerDNS/pdns/pull/7915

Best regards,
-- 
Remi Gacogne
PowerDNS.COM BV - https://www.powerdns.com/

_______________________________________________
Pdns-dev mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-dev
signature.asc (application/pgp-signature, 488 B)
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEE1jAMq8v0abvjkuUDogjtT4r1hEYFAl0A0J4ACgkQogjtT4r1
hEa7+Qf7BuLV9AL6qEGc77ZIPu9MxLq4G663mQuxmVvds3KXEdGb4MewacfrPo6/
s4E/WVxu3WVl53m7bAn8DwpR4n/HfAsudNuYn+bpHvl5LPHShpGAXcd8LfPXokCf
Fku4WTPk7BTs8OX1tcp/oR/srvnGtsKFCfODxzPKK1GVZp1nVyI+Q9PnRNPdWoKI
W4y+bSV6F3Uo0rbNkvnVfxcV/3+pZGyHjEWjI1ycT6dS2w2wVblNrmf92C1vKaik
TU2KLHDTIfy+WMlR9FfCiBuOjec3rspIADYphDTWSfUuRnvjoKK/jBiHwnTQY0MU
/FTUs04+p8GiXBgLhUas0ImjncJaEQ==
=2AIp
-----END PGP SIGNATURE-----