DNSCrypt/dnscrypt-proxy can't encrypt tls sni

[lkj0000]

DNSCrypt/dnscrypt version: 2.1.2
OS: windows10 21H2
Browser version: 105.0.1343.42
Browser open ECH setting reference: https://techcommunity.microsoft.com/t5/discussions/you-can-now-enable-encrypted-client-hello-encrypted-sni-or-esni/m-p/3600372
Description:
No matter how to set it can not pass the EHC test, you can crawl tls sni through Wireshark to get the real domain access, please ask sni can not encrypt is DNSCrypt/dnscrypt or browser problems?

[jedisct1]

ECH happens at the browser level.

You need to be using Cloudflare as a resolver.

I don't know much about Edge, but maybe it does the same stupid thing as Firefox and requires a direct connection to a DoH server in order to enable ECH. In that case, you'll have to do the same thing as with Firefox: https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Local-DoH

[jedisct1]

Also, since Edge is Chromium-based, may you need to explicitly enable it.

[lkj0000]

Thanks!
The problem I had when checking the wiki was
The original example." openssl req -x509 -nodes -newkey rsa:2048 -days 5000 -sha256 -keyout
localhost.pem -out localhost.pem"

I want to change rsa:2048 to ECC384, then I can't output keypem
Change this example." openssl req -x509 -nodes -newkey ecc:384 -days 365 -sha256 -keyout
localhost.pem -out localhost.pem"
Please guide me, thanks!

[jedisct1]

https://www.scottbrady91.com/openssl/creating-elliptical-curve-keys-using-openssl

[lkj0000]

Thank you!
The configuration according to https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Local-DoH worked.
The chorme settings are successful but still can't encrypt tls sni , thanks.
Thank you.