<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 8 May 2018, at 19:49, Puneet Sood <<a href="mailto:psood74@gmail.com" class="">psood74@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hello,<br class=""><br class="">Some basic questions that I could not find answers to on the website.<br class=""><br class="">1. When doing a query from the command-line, is there a way to get debug<br class="">info like what transports (udp, tcp, tls) are being tried?<br class="">$ getdns_query @1.1.1.1 <a href="http://www.wikipedia.org" class="">www.wikipedia.org</a><br class=""></div></div></blockquote><div><br class=""></div>Hi, <br class=""><div><br class=""></div><div>If you add ‘+return_call_reporting' you will see an extra section in the response dict that shows what transport was eventually used for the query. If you want very detailed debugging of each transport tried and fallback conditions then you can compile getdns with the '—enabled-debug-stub' flag (but beware, this debug output is verbose).</div><div><br class=""></div><div>Also note that the query above will use getdns in the default recursive mode (not in stub mode) which does not support TLS (since no recursive resolver does). </div><div>[Unless you built getdns with the ‘--enable-stub-only- flag which disables recursive mode so the default is stub]</div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">2. When attempting to use TLS (only), it's unclear what the right<br class="">invocation is and the error message is not helpful. What is the right way<br class="">to do a TLS only query?<br class=""></div></div></blockquote><div><br class=""></div><div><div class="">getdns_query -s -L @1.1.1.1 <a href="http://www.wikipedia.org" class="">www.wikipedia.org</a></div><div class=""><br class=""></div><div class="">-s switches to stub mode</div><div class="">-L specfies TLS as the only transport</div><div class="">-m requires authentication of the upstream so for Cloudflare use </div><div class=""><br class=""></div><div class="">getdns_query -s -L -m @1.1.1.1~<a href="http://cloudflare-dns.com" class="">cloudflare-dns.com</a>. <a href="http://www.wikipedia.org" class="">www.wikipedia.org</a></div></div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">$ getdns_query -L @1.1.1.1 <a href="http://www.wikipedia.org" class="">www.wikipedia.org</a> A<br class="">An error occurred: 301 'The context has internal deficiencies'<br class="">All done.<br class=""></div></div></blockquote></div><br class=""><div class="">This is (as mentioned above) because recursive mode doesn’t support TLS. This is on the webpage but rather hidden:</div><div class=""><a href="https://getdnsapi.net/documentation/readme/#minor-omissions" class="">https://getdnsapi.net/documentation/readme/#minor-omissions</a></div><div class="">But I also agree the error message is distinctly unhelpful here and this issue should be clearer in the usage!</div><div class=""><br class=""></div><div class="">The usage does contain descriptions of all the parameters but I think this page:</div><div class=""><a href="https://getdnsapi.net/blog/getdns_query/" class="">https://getdnsapi.net/blog/getdns_query/</a></div><div class="">could do with some update :-)</div><div class=""><br class=""></div><div class="">There </div><div class=""><br class=""></div><div class="">Sara. </div></body></html>