Compatibility with Dnsdist?

On Android, I tried to use RethinkDNS with a self hosted dnsdist server: added a new entry in DNS->Configure->DNS over HTTPS. The url is of the form: https://.../dns-query. RethinkDNS says connected below the newly ticked entry, but then no websites are getting DNS resolved in Chrome browser (Error: DNS_PROBE_STARTED) or at all. When I select the Cloudflare entry, everything seems to work fine, so I am wondering what may be the issue. Is RethinkDNS just incompatible with dnsdist? Just to add, the dnsdist server uses a self signed certificate whose ca.crt has been imported into Android. Perhaps I need to import the ca.cert into RethinkDNS itself or does it already ask the Android OS for verification?

[logicReasoner]

Well, at least RethinkDNS’s “dummy” VPN seems to be relatively lightweight as in I haven’t noticed it draining too much battery for the job it does. In fact, having most of the apps blocked from accessing the Internet keeps the smartphone running longer.

[ignoramous]

If the certs are installed in Android’s ca-store, the app shouldn’t have trouble trusting it. Unless, Go (our underlying DoH impl) is doing something funky with it (it is known to do so in the past).

I haven’t tested this scenario at all, but from your experience, it seems like user-ca aren’t picked up to determine chain of trust.

Perhaps I need to import the ca.cert into RethinkDNS itself or does it already ask the Android OS for verification?

I don’t think anything you’d do would make this work. This is on us to investigate (and fix). Thanks for the bugreport.