[needs-packaging] dnscrypt-proxy

[Alusa]

DNSCrypt

A tool for securing communications between a client and a DNS resolver.

Description

dnscrypt-proxy provides local service which can be used directly as your local resolver or as a DNS forwarder, encrypting and authenticating requests using the DNSCrypt protocol and passing them to an upstream server, by default OpenDNS who run this on their resolvers.

The DNSCrypt protocol uses high-speed high-security elliptic-curve cryptography and is very similar to DNSCurve, but focuses on securing communications between a client and its first-level resolver.

While not providing end-to-end security, it protects the local network, which is often the weakest point of the chain, against man-in-the-middle attacks. It also provides some confidentiality to DNS queries.

URL: https://github.com/opendns/dnscrypt-proxy

License: https://github.com/opendns/dnscrypt-proxy/blob/master/COPYING

[Brian Murray (brian-murray)]

*** This is an automated message ***

This bug is tagged needs-packaging which identifies it as a request for a new package in Ubuntu. As a part of the managing needs-packaging bug reports specification, https://wiki.ubuntu.com/QATeam/Specs/NeedsPackagingBugs, all needs-packaging bug reports have Wishlist importance. Subsequently, I'm setting this bug's status to Wishlist.

[Sergey "Shnatsel" Davidoff (shnatsel)]

There's an upstream ITP but Ubuntu will probably have to maintain its own version of DNSCrypt, because in Ubuntu it needs an Upstart job and has to be pre-configured to bind to 127.0.0.2 because 127.0.0.1 is occupied by dnsmasq. Oh, and you could also include an AppArmor profile as an added bonus.

I've packaged DNSCrypt in my PPA, https://launchpad.net/~shnatsel/+archive/dnscrypt
The package includes all of the above Ubuntu delta items.

[pataquets (pataquets)]

For the record, opened issue in github's project page:
https://github.com/jedisct1/dnscrypt-proxy/issues/41

[Sergey "Shnatsel" Davidoff (shnatsel)]

I've committed Ubuntu-oritented packaging upstream. It's in a perfectly workable state, provides an Upstart job, .default file for configuration and even a (deactivated by default) AppArmor profile. It runs DNSCrypt on 127.0.0.2:53 by default since 127.0.0.1:53 is already occupied by dnsmasq.
See the upstream pull request for details: https://github.com/jedisct1/dnscrypt-proxy/pull/39

[pataquets (pataquets)]

I can confirm that Sergey's PPA packages had been working wonderfully since several weeks in my systems. Thank you very much, Sergey.
Sergey's configurations work unobtrusively and flawlessly. Just manually switch to 127.0.0.2 from NetworkManager applet or config it via /etc/resolvconf.d/head file to prepend DNSCrypt resolver to NetworkManager-applet provided DNS.

It would be great if some git-ninja among all interested audience could help at https://github.com/jedisct1/dnscrypt-proxy/issues/41 in order to get closer to an automatically-built PPA straight from upstream code.

[aaaisan (aaaisan)]

How to remove dnscrypt-proxy?

[Logan Rosen (logan)]

dnscrypt-proxy is now in Wily.