Openwrt

關於 openwrt dnscrypt

  • January 7, 2016

我使用 dnscrypt-server-docker ( https://github.com/jedisct1/dnscrypt-server-docker )自託管了一個 dnscrypt 伺服器

我在我的 mac os x 上測試它,它工作正常

$ sudo dnscrypt-proxy \                            
   --provider-key=xxxx \
   --resolver-address=xxxx:xxxx \
   --provider-name=2.dnscrypt-cert.xxxx.org 

[NOTICE] Starting dnscrypt-proxy 1.6.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate #808464433 received
[INFO] This certificate looks valid
[INFO] Chosen certificate #808464433 is valid from [2015-12-09] to [2015-12-10] [INFO] Server key fingerprint is xxxxx
[NOTICE] Proxying from 127.0.0.1:53 to xxxx:xxxx

但是當我用openwrt執行它時,它是錯誤的。

[NOTICE] Starting dnscrypt-proxy 1.6.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate #808464433 received
[INFO] This certificate has not been activated yet
[ERROR] No useable certificates found
[INFO] Refetching server certificates
[INFO] Server certificate #808464433 received
[INFO] This certificate has not been activated yet
[ERROR] No useable certificates found

我嘗試升級 dnscrypt-proxy,但效果不一樣。

我該如何解決?

這是一個時區問題,所以我的證書無法驗證通過。

解決:伺服器和客戶端使用某個時區。

引用自:https://unix.stackexchange.com/questions/248234