关于openwrt泼冷水

Question

我自己托管了一个dnscrypt服务器，使用dnscrypt server -docker (https://github.com/jedisct1/dnscrypt-server-docker)

我在我的mac os x上测试它，它工作得很好

$ sudo dnscrypt-proxy \                            
    --provider-key=xxxx \
    --resolver-address=xxxx:xxxx \
    --provider-name=2.dnscrypt-cert.xxxx.org 

[NOTICE] Starting dnscrypt-proxy 1.6.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate #808464433 received
[INFO] This certificate looks valid
[INFO] Chosen certificate #808464433 is valid from [2015-12-09] to [2015-12-10] [INFO] Server key fingerprint is xxxxx
[NOTICE] Proxying from 127.0.0.1:53 to xxxx:xxxx

但是当我使用openwrt运行它时，它是错误的。

[NOTICE] Starting dnscrypt-proxy 1.6.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate #808464433 received
[INFO] This certificate has not been activated yet
[ERROR] No useable certificates found
[INFO] Refetching server certificates
[INFO] Server certificate #808464433 received
[INFO] This certificate has not been activated yet
[ERROR] No useable certificates found

我试着升级dnscrypt代理，但是不起作用。

我怎么才能修好它？

Answer 1

这是一个时区问题，所以我的证书无法验证通过。

解决方案:服务器和客户端使用一些时区。