When I run Kaspersky antivirus, it doesn't work due to a certificate issue.

[lovehyunju]

When I run Kaspersky antivirus, it doesn't work due to a certificate issue.

When I run the program, it goes into an infinite loop as shown below.
(I use cloudflare, google servers).

In the dnscrypt-proxy.toml file, I set it up like this
server_names = ['google', 'cloudflare']

C:\Temp\dnscrypt-proxy.exe
[2024-01-04 16:26:41] [CRITICAL] [cloudflare] Certificate hash [880cfbfb5b0780a9a81e45bea74ec32ec622b359c9e5d7f53c469d74080966cf] not found
[2024-01-04 16:26:42] [CRITICAL] [google] Certificate hash [6a5062b0d178d556f163b13b1b0f19435d02588291cc75589dfee6eb11c8d5c3] not found
[2024-01-04 16:26:42] [ERROR] Certificate hash not found

[lifenjoiner]

Without Kaspersky, does it work well?

[jedisct1]

What does dnscrypt-proxy -show-certs print?

[dodmi]

Well, I guess Kaspersky intercepts the SSL connection. And therefore, pinned certificates (explicit certificate hashes) will cause an error, because a Kaspersky certificate is presented to dnscrypt-proxy.
You'll have to disable SSL analysis (or what ever it's called in Kaspersky) for dnscrypt-proxy.

[lovehyunju]

This is the output when Kaspersky antivirus is uninstalled.

[2024-01-07 02:53:29] [NOTICE] dnscrypt-proxy 2.1.5
[2024-01-07 02:53:29] [NOTICE] Service is not usable yet
[2024-01-07 02:53:29] [NOTICE] Resolving server host [download.dnscrypt.info] using bootstrap resolvers over udp
[2024-01-07 02:53:31] [NOTICE] Source [public-resolvers] loaded
[2024-01-07 02:53:31] [NOTICE] Firefox workaround initialized
[2024-01-07 02:53:31] [NOTICE] Advertised cert: [CN=dns.google] [cd06373ee2b520075a837d83ef7fdc518138b2ecf62e5d6d5dc1583eb7699634]
[2024-01-07 02:53:31] [NOTICE] Advertised cert: [CN=GTS CA 1C3,O=Google Trust Services LLC,C=US] [0625ac65b521da9255c15c0b806e2a3c90d010b0cdc7045df65d05f5cb693db9]
[2024-01-07 02:53:31] [NOTICE] Advertised cert: [CN=GTS Root R1,O=Google Trust Services LLC,C=US] [6a5062b0d178d556f163b13b1b0f19435d02588291cc75589dfee6eb11c8d5c3]
[2024-01-07 02:53:31] [NOTICE] [google] OK (DoH) - rtt: 38ms
[2024-01-07 02:53:31] [NOTICE] Advertised cert: [CN=cloudflare.com,O=Cloudflare, Inc.,L=San Francisco,ST=California,C=US] [8daa18baf94b4af89d1079557b901674e94e66974a8504a32bfaf1eb3fa5700d]
[2024-01-07 02:53:31] [NOTICE] Advertised cert: [CN=Cloudflare Inc ECC CA-3,O=Cloudflare, Inc.,C=US] [9cbba0fc962f7a2b31c62b1b175a2de4c50a8395727e30b626a80009a780e3d8]
[2024-01-07 02:53:31] [NOTICE] [cloudflare] OK (DoH) - rtt: 37ms
[2024-01-07 02:53:31] [NOTICE] Sorted latencies:
[2024-01-07 02:53:31] [NOTICE] - 37ms cloudflare
[2024-01-07 02:53:31] [NOTICE] - 38ms google
[2024-01-07 02:53:31] [NOTICE] Server with the lowest initial latency: cloudflare (rtt: 37ms)

[jedisct1]

The output when Kaspersky is installed would be more interesting :)

[lovehyunju]

Kaspersky installed..

[2024-01-07 09:53:00] [NOTICE] dnscrypt-proxy 2.1.5
[2024-01-07 09:53:00] [NOTICE] Source [public-resolvers] loaded
[2024-01-07 09:53:00] [NOTICE] Source [relays] loaded
[2024-01-07 09:53:00] [NOTICE] Firefox workaround initialized
[2024-01-07 09:53:00] [NOTICE] Advertised cert: [CN=dns.google] [a8e801945cddc136dec5818b37f953bb2ed477b934ca2767e8488aa801c2ec08]
[2024-01-07 09:53:00] [NOTICE] Advertised cert: [CN=Kaspersky Anti-Virus Personal Root Certificate,O=AO Kaspersky Lab] [ed0cde94664e957b8b16dde0391af55d99ff206e01cfb229a4fa580f48f6bc31]
[2024-01-07 09:53:00] [CRITICAL] [google] Certificate hash [6a5062b0d178d556f163b13b1b0f19435d02588291cc75589dfee6eb11c8d5c3] not found