starred/AdGuardHome

Fork 0

mirror of https://github.com/AdguardTeam/AdGuardHome.git synced 2026-03-04 00:01:12 -05:00

DNScrypt - key validity period #4676

New issue

Open

opened 2026-03-04 05:26:25 -05:00 by deekerman · 2 comments

deekerman commented

2026-03-04 05:26:25 -05:00

Owner

Originally created by @ghost on GitHub (Aug 23, 2023).

Prerequisites

I have checked the Wiki and Discussions and found no answer
I have searched other issues and found no duplicates
I want to report a bug and not ask a question or ask for help
I have set up AdGuard Home correctly and configured clients to use it. (Use the Discussions for help with installing and configuring clients.)

Platform (OS and CPU architecture)

Linux, ARM64

Installation

GitHub releases or script from README

Setup

On one machine

AdGuard Home version

v0.107.36

Action

The the key validity period using dnscrypt on Adguard Home is excessively long.

[2023-08-23 10:55:48] [INFO] [2.dnscrypt-cert.testserver.local] the key validity period for this server is excessively long (365 days), significantly reducing reliability and forward security.

Expected result

Reduse the key validity period for extra security. After all, the use of DNScrypt is there for one reason only. Security.

Actual result

The key validity is 365 days long.

Additional information and/or screenshots

No response

Originally created by @ghost on GitHub (Aug 23, 2023). ### Prerequisites - [X] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions/categories/q-a) and found no answer - [X] I have searched other issues and found no duplicates - [X] I want to report a bug and not [ask a question or ask for help](https://github.com/AdguardTeam/AdGuardHome/discussions/categories/q-a) - [X] I have set up AdGuard Home correctly and [configured clients to use it](https://github.com/AdguardTeam/AdGuardHome/wiki/Clients). (Use the [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions/categories/q-a) for help with installing and configuring clients.) ### Platform (OS and CPU architecture) Linux, ARM64 ### Installation GitHub releases or script from README ### Setup On one machine ### AdGuard Home version v0.107.36 ### Action The the key validity period using dnscrypt on Adguard Home is excessively long. `[2023-08-23 10:55:48] [INFO] [2.dnscrypt-cert.testserver.local] the key validity period for this server is excessively long (365 days), significantly reducing reliability and forward security.` ### Expected result Reduse the key validity period for extra security. After all, the use of DNScrypt is there for one reason only. Security. ### Actual result The key validity is 365 days long. ### Additional information and/or screenshots _No response_

deekerman added the

enhancement

external libs

labels

2026-03-04 05:26:25 -05:00

deekerman commented

2026-03-04 05:26:34 -05:00

Author

Owner

@ainar-g commented on GitHub (Aug 23, 2023):

Hello. Which tool is the notice coming from? In any case, the default certificate_ttl can already be overriden, and if you want the default to be changed, you should file an issue with the github.com/ameshkov/dnscrypt repository.

@ainar-g commented on GitHub (Aug 23, 2023): Hello. Which tool is the notice coming from? In any case, the default `certificate_ttl` can already be overriden, and if you want the default to be changed, you should file an issue with the [`github.com/ameshkov/dnscrypt`](https://github.com/ameshkov/dnscrypt) repository.

deekerman commented

2026-03-04 05:26:41 -05:00

Author

Owner

@ghost commented on GitHub (Aug 23, 2023):

dnscrypt-proxy by jedisct1.
And yep already changed the default 365 days.
But I think as default way to long. Will create a seperate ticket: https://github.com/ameshkov/dnscrypt/issues/22
Thanks.

@ghost commented on GitHub (Aug 23, 2023): dnscrypt-proxy by jedisct1. And yep already changed the default 365 days. But I think as default way to long. Will create a seperate ticket: https://github.com/ameshkov/dnscrypt/issues/22 Thanks.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/AdGuardHome#4676

No description provided.

Rows
Columns