DoT support with client ID

[nichu42]

@girish
Is this supposed to work now?
I installed the latest AdGuard Home version with Cloudron and set a wildcard alias (*.thirdlevel).
But my Android phone is still unable to connect to device.thirdlevel.domain.com

Is there still something that has to be implemented on Cloudron's side or am I missing something?

[girish]

@nichu42 It will only work with next cloudron release - 7.4.

AdGuard supports ClientID in both DoH and DoT.

DoH client id works already right now. You can use this in firefox, for example, like this (in about:config). Screenshot below is from desktop but maybe the mobile client supports it:

Android only supports DoT (the 'private DNS' feature). It requires a change in platform and thus will only work in next release.

[nichu42]

@girish
OK, thanks. I was a bit confused by the AdGuard changelog you posted that said "Add ClientID support with DoT".
So we're not waiting for an AdGuard Home release, but for the next Cloudron release.

[nichu42]

@girish

I just wanted to leave a big thank-you!
DoT works perfectly with Cloudron 7.4, so I can cancel my NextDNS subscription now.

[luckow]

@girish mh. is there anything to do if there is already a previous version of adguard & cloudron? The moment I updated both to the latest version and added an alias for the wildcard certificate, there is a mismatch between sub third and third level domain.

dog cloudron.io --tls @phone.adg.example.org
Error [tls]: error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1889: (hostname mismatch)

dog cloudron.io --tls @adg.example.org
A cloudron.io. 5m00s 165.227.67.76

Forget about this question. I tested it with the wrong instance with v7.3

[7dowWilkes]

@girish
also a big thank you from my side - the solution of software-version and adguard works like a charm

[lukas]

@girish said in DoT support with client ID:

Android only supports DoT (the 'private DNS' feature). It requires a change in platform and thus will only work in next release.

is it already working? Trying to get it running but I have no success

[nichu42]

@lukas said in DoT support with client ID:

is it already working? Trying to get it running but I have no success

Yes, it is. I have DoH and DoT enabled and restricted access to my clients. It's working great.
What have you tried so far? Which Cloudron version are you running?

[lukas]

@nichu42 said in DoT support with client ID:

What have you tried so far? Which Cloudron version are you running?

Added Client ID, like lukas-android to allow list, and added an alias lukas-android.agh.mydomain.tld to AdGuard Cloudron App. I'm running Cloudron 7.4

Regards,
Lukas

[girish]

@lukas let's follow up at https://forum.cloudron.io/topic/9033/adguard-home-wildcard-aliases