dnscrypt

Jul 13, 2021

Changes in this version

type Client

+ UDPSize int

type Server

+ UDPSize int

Apr 14, 2021

Changes in this version

+ const ErrServerNotStarted

+ type Error string

+ func (e Error) Error() string

type Server

+ func (s *Server) Shutdown(ctx context.Context) error

+ type ServerDNSCrypt interface

+ ServeTCP func(l net.Listener) error

+ ServeUDP func(l *net.UDPConn) error

+ Shutdown func(ctx context.Context) error

Oct 19, 2020

Changes in this version

+ var ErrCertMagic = errors.New("invalid cert magic")

+ var ErrCertTooShort = errors.New("cert is too short")

+ var ErrEsVersion = errors.New("unsupported es-version")

+ var ErrFailedToFetchCert = errors.New("failed to fetch DNSCrypt certificate")

+ var ErrInvalidCertSignature = errors.New("cert has invalid signature")

+ var ErrInvalidClientMagic = errors.New("DNSCrypt query contains invalid client magic")

+ var ErrInvalidDNSStamp = errors.New("invalid DNS stamp")

+ var ErrInvalidDate = errors.New("cert has invalid ts-start or ts-end")

+ var ErrInvalidPadding = errors.New("invalid padding")

+ var ErrInvalidQuery = errors.New("DNSCrypt query is invalid and cannot be decrypted")

+ var ErrInvalidResolverMagic = errors.New("DNSCrypt response contains invalid resolver magic")

+ var ErrInvalidResponse = errors.New("DNSCrypt response is invalid and cannot be decrypted")

+ var ErrQueryTooLarge = errors.New("DNSCrypt query is too large")

+ var ErrServerConfig = errors.New("invalid server configuration")

+ var ErrTooShort = errors.New("DNSCrypt message is too short")

+ func HexDecodeKey(str string) ([]byte, error)

+ func HexEncodeKey(b []byte) string

+ type Cert struct

+ ClientMagic [clientMagicSize]byte

+ EsVersion CryptoConstruction

+ NotAfter uint32

+ NotBefore uint32

+ ResolverPk [keySize]byte

+ ResolverSk [keySize]byte

+ Serial uint32

+ Signature [ed25519.SignatureSize]byte

+ func (c *Cert) Deserialize(b []byte) error

+ func (c *Cert) Serialize() ([]byte, error)

+ func (c *Cert) Sign(privateKey ed25519.PrivateKey)

+ func (c *Cert) String() string

+ func (c *Cert) VerifyDate() bool

+ func (c *Cert) VerifySignature(publicKey ed25519.PublicKey) bool

+ type Client struct

+ Net string

+ Timeout time.Duration

+ func (c *Client) Dial(stampStr string) (*ResolverInfo, error)

+ func (c *Client) DialStamp(stamp dnsstamps.ServerStamp) (*ResolverInfo, error)

+ func (c *Client) Exchange(m *dns.Msg, resolverInfo *ResolverInfo) (*dns.Msg, error)

+ func (c *Client) ExchangeConn(conn net.Conn, m *dns.Msg, resolverInfo *ResolverInfo) (*dns.Msg, error)

+ type CryptoConstruction uint16

+ const UndefinedConstruction

+ const XChacha20Poly1305

+ const XSalsa20Poly1305

+ func (c CryptoConstruction) String() string

+ type EncryptedQuery struct

+ ClientMagic [clientMagicSize]byte

+ ClientPk [keySize]byte

+ EsVersion CryptoConstruction

+ Nonce [nonceSize]byte

+ func (q *EncryptedQuery) Decrypt(query []byte, serverSecretKey [keySize]byte) ([]byte, error)

+ func (q *EncryptedQuery) Encrypt(packet []byte, sharedKey [sharedKeySize]byte) ([]byte, error)

+ type EncryptedResponse struct

+ EsVersion CryptoConstruction

+ Nonce [nonceSize]byte

+ func (r *EncryptedResponse) Decrypt(response []byte, sharedKey [sharedKeySize]byte) ([]byte, error)

+ func (r *EncryptedResponse) Encrypt(packet []byte, sharedKey [sharedKeySize]byte) ([]byte, error)

+ type Handler interface

+ ServeDNS func(rw ResponseWriter, r *dns.Msg) error

+ var DefaultHandler Handler = &defaultHandler{ ... }

+ type ResolverConfig struct

+ CertificateTTL time.Duration

+ EsVersion CryptoConstruction

+ PrivateKey string

+ ProviderName string

+ PublicKey string

+ ResolverPk string

+ ResolverSk string

+ func GenerateResolverConfig(providerName string, privateKey ed25519.PrivateKey) (ResolverConfig, error)

+ func (rc *ResolverConfig) CreateCert() (*Cert, error)

+ func (rc *ResolverConfig) CreateStamp(addr string) (dnsstamps.ServerStamp, error)

+ type ResolverInfo struct

+ ProviderName string

+ PublicKey [keySize]byte

+ ResolverCert *Cert

+ SecretKey [keySize]byte

+ ServerAddress string

+ ServerPublicKey ed25519.PublicKey

+ SharedKey [keySize]byte

+ type ResponseWriter interface

+ LocalAddr func() net.Addr

+ RemoteAddr func() net.Addr

+ WriteMsg func(m *dns.Msg) error

+ type Server struct

+ Handler Handler

+ ProviderName string

+ ResolverCert *Cert

+ func (s *Server) ServeTCP(l net.Listener) error

+ func (s *Server) ServeUDP(l *net.UDPConn) error

+ type TCPResponseWriter struct

+ func (w *TCPResponseWriter) LocalAddr() net.Addr

+ func (w *TCPResponseWriter) RemoteAddr() net.Addr

+ func (w *TCPResponseWriter) WriteMsg(m *dns.Msg) error

+ type UDPResponseWriter struct

+ func (w *UDPResponseWriter) LocalAddr() net.Addr

+ func (w *UDPResponseWriter) RemoteAddr() net.Addr

+ func (w *UDPResponseWriter) WriteMsg(m *dns.Msg) error