DNSCrypt - dnscrypt-proxy Unable to retrieve server certificates

stevenausak · July 18, 2019, 2:04pm

Hello guys, some server in the list are unable to pairing with the app on router. In the log i read this

Thu Jul 18 15:47:17 2019 daemon.notice dnscrypt-proxy[20375]: dnscrypt-proxy Starting dnscrypt-proxy 1.9.5
Thu Jul 18 15:47:17 2019 daemon.info dnscrypt-proxy[20375]: dnscrypt-proxy Generating a new session key pair
Thu Jul 18 15:47:17 2019 daemon.info dnscrypt-proxy[20375]: dnscrypt-proxy Done
Thu Jul 18 15:47:32 2019 daemon.err dnscrypt-proxy[20375]: dnscrypt-proxy Unable to retrieve server certificates
Thu Jul 18 15:47:33 2019 daemon.info dnscrypt-proxy[20375]: dnscrypt-proxy Refetching server certificates
Thu Jul 18 15:47:48 2019 daemon.err dnscrypt-proxy[20375]: dnscrypt-proxy Unable to retrieve server certificates
Thu Jul 18 15:47:51 2019 daemon.info dnscrypt-proxy[20375]: dnscrypt-proxy Refetching server certificates
Thu Jul 18 15:48:06 2019 daemon.err dnscrypt-proxy[20375]: dnscrypt-proxy Unable to retrieve server certificates
Thu Jul 18 15:48:12 2019 daemon.info dnscrypt-proxy[20375]: dnscrypt-proxy Refetching server certificates
Thu Jul 18 15:48:27 2019 daemon.err dnscrypt-proxy[20375]: dnscrypt-proxy Unable to retrieve server certificates

All D0wn servers but also some other. Theres a reason for this?

worldwidewebdev · July 22, 2019, 8:38pm

I have the same experience with the Dns-crypt log file. Seems I get a constant error retrieving server certificates?

vgaetera · July 22, 2019, 9:22pm

Try to use another DNSCrypt provider or just replace DNSCrypt with DoH/DoT:
https://openwrt.org/docs/guide-user/services/dns/start#encryption

davidc502 · July 22, 2019, 11:48pm

I know this does not answer your question, but I recommend dnscrypt-proxy 2. It's faster, can be redundant, and secure.

stevenausak · August 24, 2019, 6:24am

Hell. The problem seem that some server does not work. Some servers work and some not. I don't know if it is a issue compatibility between this some servers and openwrt or the plugin or other.

vgaetera · August 24, 2019, 7:02am

Some servers have status pages like this.

stangri · August 25, 2019, 3:03am

I'd second this, I've struggled enough with DNSCrypt so that when I've discovered https_dns_proxy I've written a small WebUI for it. And between Google and Cloudflare servers I've had zero DNS downtime (knock on wood).

AnonymousMhl · October 15, 2021, 8:33pm

I have the same problem on my router AR750S with firmware OpenWrt 21.02.0. How can I replace the resolver list with a v3?

Fri Oct 15 20:07:08 2021 daemon.err dnscrypt-proxy[8730]: dnscrypt-proxy Unable to retrieve server certificates
Fri Oct 15 20:12:08 2021 daemon.info dnscrypt-proxy[8730]: dnscrypt-proxy Refetching server certificates
Fri Oct 15 20:12:23 2021 daemon.err dnscrypt-proxy[8730]: dnscrypt-proxy Unable to retrieve server certificates
Fri Oct 15 20:17:23 2021 daemon.info dnscrypt-proxy[8730]: dnscrypt-proxy Refetching server certificates
Fri Oct 15 20:17:38 2021 daemon.err dnscrypt-proxy[8730]: dnscrypt-proxy Unable to retrieve server certificates
Fri Oct 15 20:22:38 2021 daemon.info dnscrypt-proxy[8730]: dnscrypt-proxy Refetching server certificates
Fri Oct 15 20:22:53 2021 daemon.err dnscrypt-proxy[8730]: dnscrypt-proxy Unable to retrieve server certificates
Fri Oct 15 20:27:53 2021 daemon.info dnscrypt-proxy[8730]: dnscrypt-proxy Refetching server certificates
Fri Oct 15 20:28:08 2021 daemon.err dnscrypt-proxy[8730]: dnscrypt-proxy Unable to retrieve server certificates