diff options
| author | Jan Hak <jan.hak@nic.cz> | 2020-01-07 14:24:21 +0100 |
|---|---|---|
| committer | Daniel Salzman <daniel.salzman@nic.cz> | 2020-07-02 10:57:11 +0200 |
| commit | 3eff84e99818543d3cc74b5821fcc605cacdaede (patch) | |
| tree | 63f86634787b6dcbcaf2a3c4507026e16706fb5e /doc/man_kdig.rst | |
| parent | kdig: add DoH support (diff) | |
| download | knot-3eff84e99818543d3cc74b5821fcc605cacdaede.tar.xz knot-3eff84e99818543d3cc74b5821fcc605cacdaede.zip | |
kdig: add documentation for DoH
Diffstat (limited to 'doc/man_kdig.rst')
| -rw-r--r-- | doc/man_kdig.rst | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/doc/man_kdig.rst b/doc/man_kdig.rst index 28de16e6f..699ce0838 100644 --- a/doc/man_kdig.rst +++ b/doc/man_kdig.rst @@ -251,6 +251,16 @@ Options (%u or specify hours). OCSP responses older than the specified period are considered invalid. +**+**\ [\ **no**\ ]\ **https**\[\ =\ *URL*\] + Use HTTPS (DNS-over-HTTPS) in wire format (:rfc:`1035#section-4.2.1`). + It is also possible to specify URL=\[authority\]\[/path\] where request + will be send. Authority might also be specified as server name (parameter `@`). + Library *libnghttp2* is required. + +**+**\ [\ **no**\ ]\ **https-get** + Use HTTPS with HTTP/GET method instead of the default HTTP/POST method. + Library *libnghttp2* is required. + **+**\ [\ **no**\ ]\ **nsid** Request the nameserver identifier (NSID). @@ -338,6 +348,12 @@ Examples $ kdig -d @185.49.141.38 +tls-ca +tls-host=getdnsapi.net \ +tls-pin=foxZRnIh9gZpWnl+zEiKa0EJ2rdCGroMWm02gaxSc9S= soa example.com +5. DNS over HTTPS examples (various DoH implementations):: + + $ kdig @1.1.1.1 +https example.com. + $ kdig @193.17.47.1 +https=/doh example.com. + $ kdig @8.8.4.4 +https +https-get example.com. + Files ----- |