community/dnscrypt-proxy: upgrade to 2.0.39

2 files changed, 19 insertions, 17 deletions

diff --git a/community/dnscrypt-proxy/APKBUILD b/community/dnscrypt-proxy/APKBUILD
index 8139fd3b43..65051fe7d0 100644
--- a/community/dnscrypt-proxy/APKBUILD
+++ b/community/dnscrypt-proxy/APKBUILD
@@ -1,7 +1,7 @@
 # Contributor: Ian Bashford <ianbashford@gmail.com>
 # Maintainer: Ian Bashford <ianbashford@gmail.com>
 pkgname=dnscrypt-proxy
-pkgver=2.0.36
+pkgver=2.0.39
 pkgrel=0
 pkgdesc="A tool for securing communications between a client and a DNS resolver"
 url="https://dnscrypt.info"
@@ -52,8 +52,8 @@ setup() {
 	install -m755 -D "$srcdir"/$pkgname.setup "$subpkgdir"/usr/sbin/setup-dnscrypt
 }
 
-sha512sums="b1e3ed2a0226eaf35980b9f1125e0794640bcd837f99b8f2a0346498770305f04e27f13ccf97f01f0639285ef35f63cbbf72e9f2b419d592b615f6b07cdf7f2d  dnscrypt-proxy-2.0.36.tar.gz
+sha512sums="d4eacd8d1989b99d9932d66ef609948558af26f9db1fc37acd6b5609e2a410d20828e32f2b79f2f9fbdf822998af641aec20128e4c58233663929106e29d8e24  dnscrypt-proxy-2.0.39.tar.gz
 e0a72d39d47dc24b889d08beedbd9fdf21615f42fbab79980debdfd2c3feaa83dc3f776351f7dd13533cc85905ce4e01812e4ff8a80a9ccc0b21e9db7d6cb232  dnscrypt-proxy.initd
 c001ae39da1b2db71764cab568f9ed18e4de0cea3d1a4e7bd6dd01a5668b81a888ea9eef99de6beac08857ad7f8eb1a32d730e946ac3563e4dcfa27147e35052  dnscrypt-proxy.confd
 66dd43d84117a0151ae41f34d82b716760382a5a491424bf6418228ffd21f0dfbc88e34cc5074e11f97f006335d97b85367bb9ab1d96747a48e893c022ad52d0  dnscrypt-proxy.setup
-b4dc13c948152dd411f3fc67a72ac5d1fbb835253ed6340beceb571e151323ca644c486107e6779fc32f4d3e958b333e7f1d45756257369ded95457918cbe8a1  config-full-paths.patch"
+e09e4a8a67db94a98790ac3025cf12c28a4c765d14d03e04f493b94d38adec8d67d717e7ab80e783147a302b97ec9131e4c475e6c983561ef7cad0d10107de0a  config-full-paths.patch"
diff --git a/community/dnscrypt-proxy/config-full-paths.patch b/community/dnscrypt-proxy/config-full-paths.patch
index 1af5089c52..b5c0d773bb 100644
--- a/community/dnscrypt-proxy/config-full-paths.patch
+++ b/community/dnscrypt-proxy/config-full-paths.patch
@@ -1,9 +1,9 @@
 diff --git a/./dnscrypt-proxy.toml b/dnscrypt-proxy/dnscrypt-proxy.toml
 new file mode 100644
-index 0000000..736ec29
+index 0000000..6f4282a
 --- /dev/null
 +++ b/dnscrypt-proxy/dnscrypt-proxy.toml
-@@ -0,0 +1,628 @@
+@@ -0,0 +1,678 @@
 +
 +##############################################
 +#                                            #
@@ -189,21 +189,23 @@ index 0000000..736ec29
 +# tls_cipher_suite = [52392, 49199]
 +
 +
-+## Fallback resolver
-+## This is a normal, non-encrypted DNS resolver, that will be only used
++## Fallback resolvers
++## These are normal, non-encrypted DNS resolvers, that will be only used
 +## for one-shot queries when retrieving the initial resolvers list, and
 +## only if the system DNS configuration doesn't work.
-+## No user application queries will ever be leaked through this resolver,
-+## and it will not be used after IP addresses of resolvers URLs have been found.
-+## It will never be used if lists have already been cached, and if stamps
++## No user application queries will ever be leaked through these resolvers,
++## and they will not be used after IP addresses of resolvers URLs have been found.
++## They will never be used if lists have already been cached, and if stamps
 +## don't include host names without IP addresses.
-+## It will not be used if the configured system DNS works.
-+## A resolver supporting DNSSEC is recommended.
++## They will not be used if the configured system DNS works.
++## Resolver supporting DNSSEC are recommended.
 +##
 +## People in China may need to use 114.114.114.114:53 here.
 +## Other popular options include 8.8.8.8 and 1.1.1.1.
++##
++## If more than one resolver are specified, they will be tried in sequence.
 +
-+fallback_resolver = '9.9.9.9:53'
++fallback_resolvers = ['9.9.9.9:53', '8.8.8.8:53']
 +
 +
 +## Always use the fallback resolver before the system DNS settings.
@@ -337,7 +339,7 @@ index 0000000..736ec29
 +
 +## Cache size
 +
-+cache_size = 1024
++cache_size = 4096
 +
 +
 +## Minimum TTL for cached entries
@@ -369,7 +371,7 @@ index 0000000..736ec29
 +
 +## dnscrypt-proxy can act as a local DoH server. By doing so, web browsers
 +## requiring a direct connection to a DoH server in order to enable some
-+## features will enable these, without bypassing your DNS proxy..
++## features will enable these, without bypassing your DNS proxy.
 +
 +## Addresses that the local DoH server should listen to
 +
@@ -385,7 +387,7 @@ index 0000000..736ec29
 +
 +
 +## Certificate file and key - Note that the certificate has to be trusted.
-+## See the Wiki for more information.
++## See the documentation (wiki) for more information.
 +
 +# cert_file = "localhost.pem"
 +# cert_key_file = "localhost.pem"
@@ -401,7 +403,7 @@ index 0000000..736ec29
 +[query_log]
 +
 +  ## Path to the query log file (absolute, or relative to the same directory as the config file)
-+  ## Can be /dev/stdout to log to the standard output (and set log_files_max_size to 0)
++  ## Non non-Windows systems, can be /dev/stdout to log to the standard output (and set log_files_max_size to 0)
 +
 +  # file = '/var/log/dnscrypt-proxy/query.log'
 +