1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81

  
# https://github.com/Cofyc/dnscrypt-wrapper
  
# https://github.com/jedisct1/libsodium
  
# https://jedisct1.gitbooks.io/libsodium/content/
  
yum install gcc
  
# Install libsodium
  
wget https://download.libsodium.org/libsodium/releases/libsodium-1.0.16.tar.gz

./configure
  
make && make check
  
sudo make install

ln -s /usr/local/lib/libsodium.so.23.1.0 /usr/lib/libsodium.so.23
  
ldconfig # if you install libsodium from source

# install libevent
  
# http://libevent.org/
  
# https://geeksww.com/tutorials/operating_systems/linux/installation/how_to_install_libevent_on_debianubuntucentos_linux.php

wget https://github.com/libevent/libevent/releases/download/release-2.1.8-stable/libevent-2.1.8-stable.tar.gz
  
tar xzf libevent-2.1.8-stable.tar.gz
  
cd libevent-2.1.8-stable
  
./configure -prefix=/opt/libevent
  
make
  
make install

# install dnscrypt-wrapper
  
git clone git://github.com/cofyc/dnscrypt-wrapper.git
  
cd dnscrypt-wrapper
  
make configure
  
./configure
  
make install

# set ip:port for dnscrypt on archlinux
  
systemctl edit dnscrypt-proxy.socket
  
https://wiki.archlinux.org/index.php/DNSCrypt_(%E7%AE%80%E4%BD%93%E4%B8%AD%E6%96%87)

#start
  
sudo systemctl start dnscrypt-proxy.service

#stop
  
sudo systemctl stop dnscrypt-proxy.socket

#key, crt expired, recreate key, crt
  
dnscrypt-wrapper -gen-crypt-keypair -crypt-secretkey-file=1.key
  
dnscrypt-wrapper -gen-cert-file -crypt-secretkey-file=1.key -provider-cert-file=1.cert -provider-publickey-file=public.key -provider-secretkey-file=secret.key

dnscrypt-wrapper -gen-crypt-keypair -crypt-secretkey-file=1.key -cert-file-expire-days=365
  
dnscrypt-wrapper -gen-cert-file -crypt-secretkey-file=1.key -provider-cert-file=1.cert -provider-publickey-file=public.key -provider-secretkey-file=secret.key -cert-file-expire-days=365
  
#restart dnscrypt server
  
#restart dnscrypt client