# doh-proxy-rs

Proxy DNS over HTTPS requests

## Usage

```bash
doh-proxy-rs --server \
    --listen=0.0.0.0:443 \
    --upstream=1.1.1.1:53 \
    --identity=./server.pfx \
    --password=foobar
```

The server requires a PKCS#12 identity. You can generate it from a key pair in PEM format:

```bash
openssl pkcs12 -export \
    -out server.pfx \
    -inkey key.pem \
    -in cert.pem \
    [-certfile chain.pem]
```

PEM certificate support depends on `native-tls` (sfackler/rust-native-tls#27).

## Known issues

- Identity loads failed when the password is empty.

## TODO

- Client