blahdns/client-conf/stunnel.md

Stunnel

stunnel is an open-source multi-platform application used to provide a universal TLS/SSL tunneling service. stunnel can be used to provide secure encrypted connections for clients or servers that do not speak TLS or SSL natively.

$ sudo apt install stunnel4
$ sudo sed -i -e "s/ENABLED=0/ENABLED=1/" /etc/default/stunnel4 

cd /etc/stunnel
nano blahdns.conf

// blahdns.conf
debug = err
[blahdns-dns]
client = yes
accept = 127.0.0.1:5353
connect = 45.32.55.94:853 #Japan
# connect = 159.69.198.101:853 #Germany
# connect = 95.216.212.177:853 #Finland

verifyChain = yes
CApath = /etc/ssl/certs

checkHost = dot-jp.blahdns.com
# checkHost = dot-de.blahdns.com 
# checkHost = dot-fi.blahdns.com 

Test

dig @127.0.0.1 -p 5353 www.google.com +tcp