Support for outgoing DoH removed from epel package?

[Frigbog]

Outgoing DoH stopped working on my Rocky Linux 9.5 box after upgrading dnsdist from version 1.8 to version 1.9.10.
It seems as if DoH is no longer part of the (epel) package. It is still working on Debian though. Is there a particular reason for this?

dnsdist --check-config

Fatal Lua error: [string "chunk"]:160: Caught exception: Outgoing DNS over HTTPS support requested (via 'dohPath' on newServer()) but it is not available
stack traceback:
[C]: in function 'newServer'
[string "chunk"]:160: in main chunk

dnsdist --version

dnsdist 1.9.10 (Lua 5.1.4 [LuaJIT 2.1.0-beta3])
Enabled features: cdb dns-over-tls(openssl) dnscrypt ebpf fstrm ipcipher libedit libsodium lmdb protobuf re2 recvmmsg/sendmmsg systemd

On Debian:

dnsdist --version
dnsdist 1.9.10 (Lua 5.1.4 [LuaJIT 2.1.0-beta3])
Enabled features: AF_XDP cdb dns-over-quic dns-over-http3 dns-over-tls(gnutls openssl) dns-over-https(h2o nghttp2) dnscrypt ebpf fstrm ipcipher libedit libsodium lmdb protobuf re2 recvmmsg/sendmmsg snmp systemd

[Habbie]

Just to be sure: EPEL, or EL packages from https://repo.powerdns.com/? If you show full version numbers from dnf or rpm we should be able to tell the difference.

[Habbie]

EPEL:

# rpm -q dnsdist ; dnsdist --version
dnsdist-1.9.10-1.el9.x86_64
dnsdist 1.9.10 (Lua 5.1.4 [LuaJIT 2.1.0-beta3])
Enabled features: cdb dns-over-tls(openssl) dnscrypt ebpf fstrm ipcipher libedit libsodium lmdb protobuf re2 recvmmsg/sendmmsg systemd

repo.powerdns.com:

# rpm -q dnsdist ; dnsdist --version
dnsdist-1.9.10-1pdns.el9.x86_64
dnsdist 1.9.10 (Lua 5.1.4 [LuaJIT 2.1.0-beta3])
Enabled features: AF_XDP cdb dns-over-quic dns-over-http3 dns-over-tls(gnutls openssl) dns-over-https(h2o nghttp2) dnscrypt ebpf fstrm ipcipher libedit libsodium lmdb protobuf re2 recvmmsg/sendmmsg snmp systemd

[Habbie]

@tjikkun can you have a look?

[tjikkun]

Hmm, it doesn't seem like I ever enabled it for Fedora/EPEL. I'll look into changing that.

[Habbie]

a note I typed on IRC where you are idle: "in the fedora git, i notice a commit 're-enable dns-over-https' on the fc41(?) branch but not on the epel9 branch"

[Frigbog]

Its the package from the EPEL repo

rpm -q dnsdist ; dnsdist --version

dnsdist-1.9.10-1.el9.x86_64
dnsdist 1.9.10 (Lua 5.1.4 [LuaJIT 2.1.0-beta3])
Enabled features: cdb dns-over-tls(openssl) dnscrypt ebpf fstrm ipcipher libedit libsodium lmdb protobuf re2 recvmmsg/sendmmsg systemd

dnf list installed "dnsdist"

Installed Packages
dnsdist.x86_64 1.9.10-1.el9 @epel

dnf info dnsdist

Installed Packages
Name : dnsdist
Version : 1.9.10
Release : 1.el9
Architecture : x86_64
Size : 8.2 M
Source : dnsdist-1.9.10-1.el9.src.rpm
Repository : @System
From repo : epel
Summary : Highly DNS-, DoS- and abuse-aware loadbalancer
URL : https://dnsdist.org
License : GPLv2
Description : dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its goal in life
: is to route traffic to the best server, delivering top performance to
: legitimate users while shunting or blocking abusive traffic.

There seem to be some differences between the packages from the EPEL and PowerDNS repos. These differences must have been introduced in version 1.9 since I always used the dnsdist package (version 1.8) from the EPEL repo and never had any problem with it.

[rgacogne]

We don't maintain the EPEL repository but we'll try to reach out to the maintainers. In the meantime you can use the PowerDNS repository, as mentioned by Habbie: https://repo.powerdns.com/