DoT is not working on Android 9+

[isac322]

First of all, thanks for your work. It's very easy to setup HA dns blocker.
I have two android 11 devices so I deployed e882fa0 (contains #306) to my k8s cluster. When I run dog https://pagead2.googlesyndication.com -S @dnbs.bhyoo.com (dog: dns client) on linux machines, there are no error and blocks perfectly. but when I apply it to Android devices (DoT example for Android 9+) it failed without any debug log on blocky pod. Please help!

[0xERR0R]

Do you use let's encrypt certificate?

[isac322]

Do you use let's encrypt certificate?

Yeap I created it using cert-manager.
FYI. I didn't setup DoH and use only DoT.

[0xERR0R]

Ok, please try to generate new certificate with "ISRG Root X1" chain (there should be a parameter).

[isac322]

@0xERR0R It worked thanks!!

[0xERR0R]

I had the same issue with my Android. I think, le changed the root certificate and android can't validate it.