DNSCrypt - dnscrypt-proxy Unable to retrieve server certificates

Installing and Using OpenWrt
#1

Hello guys, some server in the list are unable to pairing with the app on router. In the log i read this

Thu Jul 18 15:47:17 2019 daemon.notice dnscrypt-proxy[20375]: dnscrypt-proxy Starting dnscrypt-proxy 1.9.5
Thu Jul 18 15:47:17 2019 daemon.info dnscrypt-proxy[20375]: dnscrypt-proxy Generating a new session key pair
Thu Jul 18 15:47:17 2019 daemon.info dnscrypt-proxy[20375]: dnscrypt-proxy Done
Thu Jul 18 15:47:32 2019 daemon.err dnscrypt-proxy[20375]: dnscrypt-proxy Unable to retrieve server certificates
Thu Jul 18 15:47:33 2019 daemon.info dnscrypt-proxy[20375]: dnscrypt-proxy Refetching server certificates
Thu Jul 18 15:47:48 2019 daemon.err dnscrypt-proxy[20375]: dnscrypt-proxy Unable to retrieve server certificates
Thu Jul 18 15:47:51 2019 daemon.info dnscrypt-proxy[20375]: dnscrypt-proxy Refetching server certificates
Thu Jul 18 15:48:06 2019 daemon.err dnscrypt-proxy[20375]: dnscrypt-proxy Unable to retrieve server certificates
Thu Jul 18 15:48:12 2019 daemon.info dnscrypt-proxy[20375]: dnscrypt-proxy Refetching server certificates
Thu Jul 18 15:48:27 2019 daemon.err dnscrypt-proxy[20375]: dnscrypt-proxy Unable to retrieve server certificates

All D0wn servers but also some other. Theres a reason for this?

#2

I have the same experience with the Dns-crypt log file. Seems I get a constant error retrieving server certificates?

#3

Try to use another DNSCrypt provider or just replace DNSCrypt with DoH/DoT:
https://openwrt.org/docs/guide-user/services/dns/start#encryption

1 Like
#4

I know this does not answer your question, but I recommend dnscrypt-proxy 2. It's faster, can be redundant, and secure.

1 Like
#5

Hell. The problem seem that some server does not work. Some servers work and some not. I don't know if it is a issue compatibility between this some servers and openwrt or the plugin or other.

1 Like
#6

Some servers have status pages like this.

#7

I'd second this, I've struggled enough with DNSCrypt so that when I've discovered https_dns_proxy I've written a small WebUI for it. And between Google and Cloudflare servers I've had zero DNS downtime (knock on wood).

2 Likes