Deno DoT (local certs) fails about serverless-dns HOT 6 CLOSED

@amithm7 would you know what is going awry here?

from serverless-dns.

To do TLS termination in-app on deno, 3 env. variables must be set.

For local dev, in .env file:

TERMINATE_TLS=true
TLS_KEY_PATH=test/data/tls/dns.rethinkdns.localhost.key
TLS_CRT_PATH=test/data/tls/dns.rethinkdns.localhost.crt

And kdig command is:

kdig duckduckgo.com @0.0.0.0:10000 +tls +tls-sni=1-IAAAACA.dns.rethinkdns.localhost

doh command:

doh -k duckduckgo.com https://dns.rethinkdns.localhost:8080/1:4AcHAP__________-f8\=

from serverless-dns.

All three .env vars are set as approp.

The kdig command in the first comment does work for local nodejs runs... Though, I tried this other command too, but it didn't work as well:

kdig duckduckgo.com @0.0.0.0:10000 +tls +tls-sni=1-IAAAACA.dns.rethinkdns.localhost
;; WARNING: TLS, handshake failed (Decryption has failed.)
;; ERROR: failed to query server 0.0.0.0@10000(TCP)

cURL's doh command works (iff dns.rethinkdns.localhost is added to /etc/hosts), so that is good.

from serverless-dns.

This also works for me:

kdig amazon.com @dns.rethinkdns.localhost:10000 +tls +tls-sni=1-IAAAACA.dns.rethinkdns.localhost

Even sni is not used on deno, this also works for me:

kdig @dns.rethinkdns.localhost:10000 +tls amazon.com

My host file has:

❯ cat /etc/hosts
127.0.0.1       localhost a.dns.rethinkdns.localhost dns.rethinkdns.localhost

Or is it difference in versions?
I have kdig (Knot DNS), version 3.1.5

from serverless-dns.

I am on kdig v2.x

➜ kdig --version
kdig (Knot DNS), version 2.7.8

Strangely, starting today, DoT on Deno works. May be kdig v2.x doesn't work with Deno v1.1x in Januarys... who knows 🤷

from serverless-dns.

DoT is down, only in prod: #61

from serverless-dns.