Unsupported key in configuration file: [ip_encryption]

[IntelligenceInside]

Enabled ipcrypt section in dnscrypt 2.1.15

reproducible Error after initiating dnscrypt-proxy
Unsupported key in configuration file: [ip_encryption]

heres the ipcrypt section,

[ip_encryption]

## Encrypt client IP addresses in plugin logs using IPCrypt
## This provides privacy for client IP addresses while maintaining
## the ability to distinguish between different clients in logs

## Encryption algorithm (default: "none")
## - "none": No encryption (default)
## - "ipcrypt-deterministic": Deterministic encryption (same IP always encrypts to same value) - requires 16-byte key
## - "ipcrypt-nd": Non-deterministic encryption with 8-byte tweak - requires 16-byte key
## - "ipcrypt-ndx": Non-deterministic encryption with 16-byte tweak (extended) - requires 32-byte key
## - "ipcrypt-pfx": Prefix-preserving encryption (preserves network prefix relationships) - requires 32-byte key

algorithm = "ipcrypt-ndx"

## Encryption key in hexadecimal format (required if algorithm is not "none")
## Key size depends on algorithm:
## - ipcrypt-deterministic: 32 hex chars (16 bytes) - Generate with: openssl rand -hex 16
## - ipcrypt-nd: 32 hex chars (16 bytes) - Generate with: openssl rand -hex 16
## - ipcrypt-ndx: 64 hex chars (32 bytes) - Generate with: openssl rand -hex 32
## Example for deterministic/nd: key = "1234567890abcdef1234567890abcdef"
## Example for ndx: key = "1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef"
## IMPORTANT: Keep this key secret

key = "ndx:key created through openssl rand -hex 32"

[welwood08]

Since the error message suggests a general parsing error and I see no obvious mistake in the provided snippet, your full configuration will probably reveal the problem. Perhaps you've inadvertently duplicated the [ip_encryption] section?

[IntelligenceInside]

dcp.txt

[IntelligenceInside]

i commented out ipcrypt entries since service wont work without.

[welwood08]

Unfortunately, using release version 2.1.15 I'm unable to reproduce the original error using the above configuration file after uncommenting the [ip_encryption] section and entries.

I was getting an error caused by user_name = nobody but I assume that's related to my system so I just commented that for the testing. I enabled the query log, performed a query, and verified that the entry in the query log showed an encrypted client IP.

[IntelligenceInside]

Hmmm.... i am reproducing the same error on gentoo, ubuntu lts, redhat and arch.

[IntelligenceInside]

which OS and ver are you on !