Skip to content

Provide a tool/option to verify certificates #171

@rnhmjoj

Description

@rnhmjoj

When implementing key-rotation the following command was used to check the validity of the certificate/ephemeral keys.

dnscrypt-proxy --resolver-address=127.0.0.1:443 \
                 --provider-name=2.dnscrypt-cert.<yourdomain> \
                 --provider-key=<provider_public_key> \
                 --test=10080

In dnscrypt-proxy 2 --test is gone, see DNSCrypt/dnscrypt-proxy#185 and there is no other way than using the old v1 fork.

This mode should be provided by a small tool or, ideally, by dnscrypt-wrapper itself.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions