# doh-proxy-rs
Proxy DNS over HTTPS requests
## Usage
```bash
doh-proxy-rs --server \
--listen=0.0.0.0:443 \
--upstream=1.1.1.1:53 \
--identity=./server.pfx \
--password=foobar
```
The server requires a PKCS#12 identity. You can generate it from a key pair in PEM format:
```bash
openssl pkcs12 -export \
-out server.pfx \
-inkey key.pem \
-in cert.pem \
[-certfile chain.pem]
```
PEM certificate support depends on `native-tls` (sfackler/rust-native-tls#27).
## Known issues
- Identity loads failed when the password is empty.
## TODO
- Client