rkp/xray-core-awg
1
0 Fork 0
Code Issues 1 Pull Requests Actions 1 Packages Projects Releases 4 Wiki Activity

Fix reject unknown sni with single cert

Browse Source
This commit is contained in:
hmol233 committed 2021-05-10 00:28:40 +08:00
1 parent 1f92b948c0
commit e8a8465220
2 files changed
+4 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

transport/internet/tls/config.go
+2 -2
View File
@@ -214,10 +214,10 @@ func getGetCertificateFunc(c *tls.Config, ca []*Certificate) func(hello *tls.Cli
func getNewGetCertificateFunc(certs []*tls.Certificate, rejectUnknownSNI bool) func(hello *tls.ClientHelloInfo) (*tls.Certificate, error) {
return func(hello *tls.ClientHelloInfo) (*tls.Certificate, error) {
if len(certs) == 0 {
return nil, newError("empty certs")
return nil, errNoCertificates
}
sni := strings.ToLower(hello.ServerName)
if len(certs) == 1 || sni == "" {
if !rejectUnknownSNI && (len(certs) == 1 || sni == "") {
return certs[0], nil
}
gsni := "*"
transport/internet/xtls/config.go
+2 -2
View File
@@ -215,10 +215,10 @@ func getGetCertificateFunc(c *xtls.Config, ca []*Certificate) func(hello *xtls.C
func getNewGetCertificateFunc(certs []*xtls.Certificate, rejectUnknownSNI bool) func(hello *xtls.ClientHelloInfo) (*xtls.Certificate, error) {
return func(hello *xtls.ClientHelloInfo) (*xtls.Certificate, error) {
if len(certs) == 0 {
return nil, newError("empty certs")
return nil, errNoCertificates
}
sni := strings.ToLower(hello.ServerName)
if len(certs) == 1 || sni == "" {
if !rejectUnknownSNI && (len(certs) == 1 || sni == "") {
return certs[0], nil
}
gsni := "*"