doh-proxy-rs

Proxy DNS over HTTPS requests

Usage

doh-proxy-rs --server \
    --listen=0.0.0.0:443 \
    --upstream=1.1.1.1:53 \
    --identity=./server.pfx \
    --password=foobar

The server requires a PKCS#12 identity. You can generate it from a key pair in PEM format:

openssl pkcs12 -export \
    -out server.pfx \
    -inkey key.pem \
    -in cert.pem \
    [-certfile chain.pem]

PEM certificate support depends on native-tls (sfackler/rust-native-tls#27).

Known issues

• Identity loads failed when the password is empty.

TODO

• Client