Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

EDNS 的问题 #185

Closed
moi-si opened this issue Aug 16, 2024 · 7 comments
Closed

EDNS 的问题 #185

moi-si opened this issue Aug 16, 2024 · 7 comments
Labels
bug Something isn't working help wanted Extra attention is needed

Comments

@moi-si
Copy link
Contributor

moi-si commented Aug 16, 2024

移动,配置里的 DoH、DoQ 都超时了,DoT 没问题,AdGuard DoH(https://94.140.15.15/dns-query) 也超时,但浏览器自带的 DoH 用 AdGuard DoH 正常。

@URenko
Copy link
Owner

URenko commented Aug 17, 2024

暂时缺乏测试环境(真不行本地开个 DNSCrypt)。

但浏览器自带的 DoH 用 AdGuard DoH 正常。

是用的同样的 IP 形式的 URL 吗,以及使用的是何种浏览器?(HTTP/3? 能抓包看一下就好了)

@moi-si
Copy link
Contributor Author

moi-si commented Aug 18, 2024

是,Edge(已知 Chromium 内核浏览器都只支持 DoH),不会抓包,但补些日志吧。

dns.resolver.LifetimeTimeout: The resolution lifetime expired after 5.142 seconds: Server https://94.140.15.15/dns-query answered DNS over HTTPS (DOH) was requested but the httpx module is not available.; Server https://94.140.15.15/dns-query answered DNS over HTTPS (DOH) was requested but the httpx module is not available.; Server https://94.140.15.15/dns-query answered DNS over HTTPS (DOH) was requested but the httpx module is not available.; Server https://94.140.15.15/dns-query answered DNS over HTTPS (DOH) was requested but the httpx module is not available.; Server https://94.140.15.15/dns-query answered DNS over HTTPS (DOH) was requested but the httpx module is not available.; Server https://94.140.15.15/dns-query answered DNS over HTTPS (DOH) was requested but the httpx module is not available.

以下都是默认配置里的,也是这样,但在浏览器可用。

https://185.222.222.222/dns-query
https://45.11.45.11/dns-query
https://149.112.112.112/dns-query
https://149.112.112.10/dns-query

tls://dot.sb有域名的 DoT,IP 形式的都没问题(所以我现在全用这种 DoT 了):

dns.resolver.LifetimeTimeout: The resolution lifetime expired after 6.351 seconds: Server DoT:dot.sb@853 answered ; Server DoT:dot.sb@853 answered ; Server DoT:dot.sb@853 answered ; Server DoT:dot.sb@853 answered ; Server DoT:dot.sb@853 answered

唯一的 DoQ quic://dns.adguard-dns.com(改成 IP 形式也不行):

dns.resolver.LifetimeTimeout: The resolution lifetime expired after 5.176 seconds: Server DoQ:dns.adguard-dns.com@853 answered DNS-over-QUIC is not available.; Server DoQ:dns.adguard-dns.com@853 answered DNS-over-QUIC is not available.; Server DoQ:dns.adguard-dns.com@853 answered DNS-over-QUIC is not available.; Server DoQ:dns.adguard-dns.com@853 answered DNS-over-QUIC is not available.; Server DoQ:dns.adguard-dns.com@853 answered DNS-over-QUIC is not available.; Server DoQ:dns.adguard-dns.com@853 answered

@URenko
Copy link
Owner

URenko commented Aug 18, 2024

从日志来看,怎么像是没安装 DoH, DoQ 所需的包。
安装时带[doh,doq]了吗,或者 Windows 自动构建的话,确认不是 windows-lite 吗?

它们(目前)所需的包分别是:

doh = ["httpcore>=1.0.0", "httpx>=0.26.0", "h2>=4.1.0"]
doq = ["aioquic>=1.0.0"]

@moi-si
Copy link
Contributor Author

moi-si commented Aug 19, 2024

Windows 自动构建一键程序,非 lite 版。

@URenko
Copy link
Owner

URenko commented Aug 19, 2024

应该是 dnspython 2.6.0 的更改

Dnspython now looks for version metadata for optional packages and will not use them if they are too old. This prevents possible exceptions when a feature like DoH is not desired in dnspython, but an old httpx is installed along with dnspython for some other purpose.

@URenko URenko added the bug Something isn't working label Aug 19, 2024
@URenko
Copy link
Owner

URenko commented Aug 23, 2024

可能是 pyinstaller 的 bug,有空再看看

@URenko URenko added the help wanted Extra attention is needed label Aug 23, 2024
@moi-si
Copy link
Contributor Author

moi-si commented Aug 28, 2024

可能是 pyinstaller 的 bug,有空再看看

pip install pyinstaller "dnspython[doh,doq]<2.6" rich

改成==2.5就没问题了,一切正常,但tls://dot.sb应该是 DNS 自己的问题。
日志:

dns.resolver.NoNameservers: All nameservers failed to answer the query avatars.githubusercontent.com. IN A: Server DoT:185.222.222.222@853 answered [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1000)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

2 participants