aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorIan Bashford <ianbashford@gmail.com>2019-03-14 21:12:22 +0000
committerFrancesco Colista <fcolista@alpinelinux.org>2019-03-14 21:18:26 +0000
commitcec2a17c168c0cf1f21e4813a80c77553bf0f872 (patch)
tree7a2f1f2ddf24bc0c50b50bf9e0ae2046802ffa93
parent16b0e8ceee692aac8432fbbfd9e3547e72d07d63 (diff)
downloadaports-cec2a17c168c0cf1f21e4813a80c77553bf0f872.tar.gz
aports-cec2a17c168c0cf1f21e4813a80c77553bf0f872.tar.bz2
aports-cec2a17c168c0cf1f21e4813a80c77553bf0f872.tar.xz
community/dnscrypt-proxy upgrade to 2.0.21 Support for all latest features Update for golang v1.11 modules
-rw-r--r--community/dnscrypt-proxy/APKBUILD9
-rw-r--r--community/dnscrypt-proxy/config-full-paths.patch34
2 files changed, 33 insertions, 10 deletions
diff --git a/community/dnscrypt-proxy/APKBUILD b/community/dnscrypt-proxy/APKBUILD
index 29f7178ba2..42574c1317 100644
--- a/community/dnscrypt-proxy/APKBUILD
+++ b/community/dnscrypt-proxy/APKBUILD
@@ -1,7 +1,7 @@
# Contributor: Ian Bashford <ianbashford@gmail.com>
# Maintainer: Ian Bashford <ianbashford@gmail.com>
pkgname=dnscrypt-proxy
-pkgver=2.0.19
+pkgver=2.0.21
pkgrel=0
pkgdesc="A tool for securing communications between a client and a DNS resolver"
url="https://dnscrypt.info"
@@ -25,13 +25,12 @@ options="!check"
prepare() {
default_prepare
cd "$builddir"
- export GOPATH=$(pwd)
ln -sf vendor src
}
build() {
cd "$builddir"/"$pkgname"
- GOPATH="$builddir" go build -ldflags="-s -w" -v
+ go build -ldflags="-s -w" -v
}
package() {
@@ -55,8 +54,8 @@ setup() {
install -m755 -D "$srcdir"/$pkgname.setup "$subpkgdir"/usr/sbin/setup-dnscrypt
}
-sha512sums="4501a64717c0f2a9313e9328340e466c9ec325d09ef548f6af9a7855ff3497fb741269a17b397a36e2a120519820378e9f98a6a768a3678ea8144ee4690364f6 dnscrypt-proxy-2.0.19.tar.gz
+sha512sums="e01869b963ef7454f9136d8ececc4e541dae489524e03cc2906fc3b661281bd6ebf5ef8b6dc29a6bcc1dabb638b9e74200b3ed48ebcd69cd3306e8bab5dd248a dnscrypt-proxy-2.0.21.tar.gz
e0a72d39d47dc24b889d08beedbd9fdf21615f42fbab79980debdfd2c3feaa83dc3f776351f7dd13533cc85905ce4e01812e4ff8a80a9ccc0b21e9db7d6cb232 dnscrypt-proxy.initd
c001ae39da1b2db71764cab568f9ed18e4de0cea3d1a4e7bd6dd01a5668b81a888ea9eef99de6beac08857ad7f8eb1a32d730e946ac3563e4dcfa27147e35052 dnscrypt-proxy.confd
66dd43d84117a0151ae41f34d82b716760382a5a491424bf6418228ffd21f0dfbc88e34cc5074e11f97f006335d97b85367bb9ab1d96747a48e893c022ad52d0 dnscrypt-proxy.setup
-31e02083f9b246ab7a41c5d2951dd00e2ba280c4154fe345022da8401ff937de53d4ace48835140a059995f0dec0c41c51ab6bed05d696cbeb333b63d1a50e5d config-full-paths.patch"
+c8167dabea1574a2caa23f2b6f59870f4a00b5162b91d0b9deb21eee831e970b39370255f701c1cfee5c31d35904cdf61dbe666381f9c791223ef6ae35fe26bb config-full-paths.patch"
diff --git a/community/dnscrypt-proxy/config-full-paths.patch b/community/dnscrypt-proxy/config-full-paths.patch
index b9eac807d4..3b0258fd3f 100644
--- a/community/dnscrypt-proxy/config-full-paths.patch
+++ b/community/dnscrypt-proxy/config-full-paths.patch
@@ -1,9 +1,9 @@
diff --git a/./dnscrypt-proxy.toml b/dnscrypt-proxy/dnscrypt-proxy.toml
new file mode 100644
-index 0000000..ceb9308
+index 0000000..cabf679
--- /dev/null
+++ b/dnscrypt-proxy/dnscrypt-proxy.toml
-@@ -0,0 +1,506 @@
+@@ -0,0 +1,530 @@
+
+##############################################
+# #
@@ -81,9 +81,12 @@ index 0000000..ceb9308
+# Server must not enforce its own blacklist (for parental control, ads blocking...)
+require_nofilter = true
+
++# Server names to avoid even if they match all criteria
++disabled_server_names = []
++
+
+## Always use TCP to connect to upstream servers.
-+## This can be can be useful if you need to route everything through Tor.
++## This can be useful if you need to route everything through Tor.
+## Otherwise, leave this to `false`, as it doesn't improve security
+## (dnscrypt-proxy will always encrypt everything even using UDP), and can
+## only increase latency.
@@ -91,13 +94,18 @@ index 0000000..ceb9308
+force_tcp = false
+
+
-+## HTTP / SOCKS proxy
++## SOCKS proxy
+## Uncomment the following line to route all TCP connections to a local Tor node
+## Tor doesn't support UDP, so set `force_tcp` to `true` as well.
+
+# proxy = "socks5://127.0.0.1:9050"
+
+
++## HTTP/HTTPS proxy
++## Only for DoH servers
++
++# http_proxy = "http://127.0.0.1:8888"
++
+
+## How long a DNS query will wait for a response, in milliseconds
+
@@ -109,6 +117,13 @@ index 0000000..ceb9308
+keepalive = 30
+
+
++## Use the REFUSED return code for blocked responses
++## Setting this to `false` means that some responses will be lies.
++## Unfortunately, `false` appears to be required for Android 8+
++
++refused_code_in_responses = false
++
++
+## Load-balancing strategy: 'p2' (default), 'ph', 'fastest' or 'random'
+
+# lb_strategy = 'p2'
@@ -191,7 +206,7 @@ index 0000000..ceb9308
+## connectivity is not guaranteed to be immediately available.
+## Use 0 to disable.
+
-+netprobe_timeout = 30
++netprobe_timeout = 60
+
+
+## Offline mode - Do not use any remote encrypted servers.
@@ -493,6 +508,15 @@ index 0000000..ceb9308
+ refresh_delay = 72
+ prefix = ''
+
++ ## Quad9 over DNSCrypt - https://quad9.net/
++
++ # [sources.quad9-resolvers]
++ # urls = ["https://www.quad9.net/quad9-resolvers.md"]
++ # minisign_key = "RWQBphd2+f6eiAqBsvDZEBXBGHQBJfeG6G+wJPPKxCZMoEQYpmoysKUN"
++ # cache_file = "/var/cache/dnscrypt-proxy/quad9-resolvers.md"
++ # refresh_delay = 72
++ # prefix = "quad9-"
++
+ ## Another example source, with resolvers censoring some websites not appropriate for children
+ ## This is a subset of the `public-resolvers` list, so enabling both is useless
+