dnscrypt-proxy - A tool for securing communications between a client and a DNS resolver

Property Value
Distribution openSUSE Tumbleweed
Repository openSUSE Oss all
Package filename dnscrypt-proxy-1.9.5-3.4.i586.rpm
Package name dnscrypt-proxy
Package version 1.9.5
Package release 3.4
Package architecture i586
Package type rpm
Category Productivity/Networking/DNS/Utilities
Homepage https://dnscrypt.org/
License BSD-3-Clause
Maintainer -
Download size 229.25 KB
Installed size 820.71 KB
dnscrypt-proxy provides local service which can be used directly as your local resolver or as a DNS forwarder,
encrypting and authenticating requests using the DNSCrypt protocol and passing them to an upstream server,
by default Cisco who run this on their resolvers. (It used to be OpenDNS.)
The DNSCrypt protocol uses elliptic-curve cryptography and is similar to DNSCurve, but focuses on
securing communications between a client and its first-level resolver.
While not providing end-to-end security, it protects the local network, which is often the weakest point
of the chain, against man-in-the-middle attacks. It also provides some confidentiality to DNS queries.


Package Version Architecture Repository
dnscrypt-proxy-1.9.5-3.4.x86_64.rpm 1.9.5 x86_64 openSUSE Oss
dnscrypt-proxy - - -


Name Value
coreutils -
diffutils -
fillup -
grep -
libc.so.6(GLIBC_2.15) -
libltdl.so.7 -
libsodium.so.23 -
libsystemd.so.0 -
libsystemd.so.0(LIBSYSTEMD_209) -
systemd -


Name Value
config(dnscrypt-proxy) = 1.9.5-3.4
dnscrypt = 1.9.5-3.4
dnscrypt-proxy = 1.9.5-3.4
dnscrypt-proxy(x86-32) = 1.9.5-3.4
libdcplugin_example.so -
libdcplugin_example_cache.so -
libdcplugin_example_logging.so -


Name Value
dnscrypt < 1.9.5-3.4


Type URL
Mirror widehat.opensuse.org
Binary Package dnscrypt-proxy-1.9.5-3.4.i586.rpm
Source Package dnscrypt-proxy-1.9.5-3.4.src.rpm

Install Howto

Install dnscrypt-proxy rpm package:

# zypper install dnscrypt-proxy




2017-10-23 - bwiedemann@suse.com
- Make builds reproducible by using a constant __DATE__ (boo#1047218)
2017-09-06 - jengelh@inai.de
- Errors from user creation from pre scriptlet must not be ignored.
- Ensure neutrality of description.
2017-08-05 - sebix+novell.com@sebix.at
- use packaged dnscrypt-resolvers.csv
- fix systemd macros
2017-07-09 - sebix+novell.com@sebix.at
- upgrade to 1.9.5, shortened upstream changelog:
* Cache plugin: fix the way items are moved from recent to frequent lists
* In addition to making the cache work as expected, this prevents
`CacheEntry` items from becoming orphans.
* Cache plugin: fix the way items are moved from recent to frequent lists
* In addition to making the cache work as expected, this prevents
`CacheEntry` items from becoming orphans.
* Adding Babylon Network resolvers (#647)
* Update resolvers list
* Reset the reachability of nameservers if all are unreachable (#609)
* If all nameservers have been marked unreachable, they will not be queried
* again until dnscrypt-proxy is restarted. This fix allows for queries to be
* retried without restarting dnscrypt-proxy.
* Doc error: client-pk is the client' public key. Spotted by @willnix Fixes #603
* Whitelist some TLDs typically used on local networks
* Normalize the dnscrypt-resolvers.csv format
* ldns-blocking: fix another corner case with suffix matching
* .example.com
A query for `xru.example.com` would find `ru.example.com` as the longest
suffix. The expression didn't match since this is neither an exact match
nor a match that stops at a label.
However, this was ignoring the fact that there a different, shorter rule
could match.
This is pretty annoying, as keeping our promise to log the longest match
means that we need at least yet another lookup in that specific case.
Alternatively, the fpst lookup function could be specialized to stop at
labels, but that would defeat the point of this example plugin. So,
perform an extra lookup after striping the first (last, once the name is
reversed) label.
* Added pidfile
- specfile fixes, cleanup
2017-01-29 - i@marguerite.su
- update version 1.9.4
* The resolver name can be set to 'random' in order to pick a
random resolver.
* changelog for older releases see github/jedisct1/dnscrypt-proxy
- use upstream configuration instead
2017-01-29 - i@marguerite.su
- drop /etc/sysconfig/dnscrypt-proxy, it can'be used in instantiated
services, now instantiated services should be started with
"sudo systemctl start dnscrypt-proxy@config.service", the switch
from IP:Port to Config is because we need not only the IP:Port
customizable, but also the DNSCRYPT_RESOLVER_NAME, to start multi-
instances. (boo#977946)
- add /etc/dnscrypt-proxy.conf.d directory for configurations.
2016-08-13 - i@marguerite.su
- switched to systemd template service. in the future, users
should use 'sudo systemctl start dnscrypt-proxy@'
to start the service. any local address can be used.
- dropped dnscrypt-proxy.socket again. the listen address in the
socket can't be substituted at runtime that makes it impossible
to use multiple instances. and it doesn't work together with
the forking method in our systemd service.
- move pidfile and logfile into their own directories. in previous
submit, we finnaly used the user 'dnscrypt' to start the job, but
that user doesn't have write permission for /var/run and /var/log.
- dropped the /usr/sbin/dnscrypt wrapper that broke the systemd
service from forking. we used EnvironmentFile in systemd service
to load the user-customizable variables.
- changed /etc/sysconfig/dnscrypt to /etc/sysconfig/dnscrypt-proxy.
deleted those plugin items that can't be loaded by systemd. users
can use DNSCRYPT_OPTIONS to configure the plugins anyway, no need
to keep those placeholders.

See Also

Package Description
dnscrypt-proxy-devel-1.9.5-3.4.i586.rpm Header files for development of DNSCrypt plugins
dnscrypt-proxy-devel-1.9.5-3.4.x86_64.rpm Header files for development of DNSCrypt plugins
dnsmasq-2.80-3.2.i586.rpm DNS Forwarder and DHCP Server
dnsmasq-2.80-3.2.x86_64.rpm DNS Forwarder and DHCP Server
dnsmasq-utils-2.80-3.2.i586.rpm Utilities for manipulating DHCP server leases
dnsmasq-utils-2.80-3.2.x86_64.rpm Utilities for manipulating DHCP server leases
dnstracer-1.9-1.6.i586.rpm Trace a DNS record to its start of authority
dnstracer-1.9-1.6.x86_64.rpm Trace a DNS record to its start of authority
docbook-css-stylesheets-0.4-161.6.noarch.rpm DocBook CSS Stylesheets
docbook-dsssl-stylesheets-1.79-176.1.noarch.rpm DSSSL Stylesheets for the DocBook DTD
docbook-simple-1.0-334.7.noarch.rpm Simple DocBook DTD and Documentation
docbook-tdg-2.0.6-400.6.noarch.rpm DocBook: The Definitive Guide
docbook-toys-1.51.0-438.3.noarch.rpm DocBook Tools
docbook-utils-0.6.14-239.7.noarch.rpm Small Wrapper Scripts for Processing DocBook Files
docbook-utils-minimal-0.6.14-239.7.noarch.rpm Small Wrapper Scripts for Processing DocBook Files