yuhan6665
acb81ebe3d
Verify peer cert function for better man in the middle prevention ( #746 )
...
* verify peer cert function for better man in the middle prevention
* publish cert chain hash generation algorithm
* added calculation of certificate hash as separate command and tlsping, use base64 to represent fingerprint to align with jsonPb
* apply coding style
* added test case for pinned certificates
* refactored cert pin
* pinned cert test
* added json loading of the PinnedPeerCertificateChainSha256
* removed tool to prepare for v5
* Add server cert pinning for Xtls
Change command "xray tls certChainHash" to xray style
Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>
3 years ago
yuhan6665
c4fc277758
add comment for gRPC TLS silent failure behavior ( #779 )
...
When gRPC transport have been configured to use TLS, it may silently ignore TLS failure. This may make it harder to diagnose TLS setting issues when gRPC transport is used. This comment is added to help other developers be aware of this caveat.
Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>
3 years ago
世界
50e576081e
Add DispatchLink
3 years ago
世界
625cf7361a
Export PacketConnWrapper
3 years ago
yuhan6665
e286cdcaa8
Style: format code by gofumpt ( #761 )
3 years ago
yuhan6665
a229a7f85e
Revert "cancel failed grpc connection ( #707 )" ( #768 )
...
This reverts commit 0f79126379
.
3 years ago
lucifer
5e606169f1
gRPC: Parse X-Real-IP header, fix #766 ( #769 )
3 years ago
Arthur Morgan
575c7a9687
adjust
3 years ago
yuhan6665
e6711d1b48
Add header and method support to http2 transport ( #755 )
...
Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>
3 years ago
yuhan6665
4bb61701b5
Add tcpKeepAliveInterval in transport sockopt ( #754 )
...
Co-authored-by: Ahmad Karimi <ak12hastam@gmail.com>
Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>
3 years ago
yuhan6665
ef4c63812b
Fix: nullcheck on alternative systemDialer ( #752 )
...
* fix: null-check on alternative systemDialer
* delete deprecated option DualStack
Co-authored-by: rurirei <72071920+rurirei@users.noreply.github.com>
3 years ago
yuhan6665
3554886ce1
vformat supports multi-core processing ( #757 )
...
* Feat: vformat supports multi-core processing (#996 )
Co-authored-by: Loyalsoldier <10487845+Loyalsoldier@users.noreply.github.com>
3 years ago
hmol233
7033f7cf5f
Fix: protobuf file ( #724 )
3 years ago
Arthur Morgan
ffc2f7c4e2
Style: format code
3 years ago
Arthur Morgan
24b637cd5e
Fix: CounterConnection with ReadV/WriteV ( #720 )
...
Co-authored-by: JimhHan <50871214+JimhHan@users.noreply.github.com>
3 years ago
WeidiDeng
b0b2aaa70c
Fixed refresh error when multiple certificates exist ( #663 )
...
* Fix when there are multiple certs, after refresh from file all will be the same as the last.
3 years ago
yuhan6665
42d158bd85
vprotogen refine ( #717 )
...
* Update all proto files with existing vprotogen
* Chore: remove protoc-gen-gofast
* Feat: vprotogen adds version detector to block generation code from old protobuf version
* Feat: vprotogen refine logic
Co-authored-by: Loyalsoldier <10487845+Loyalsoldier@users.noreply.github.com>
3 years ago
yuhan6665
0f79126379
cancel failed grpc connection ( #707 )
...
Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>
3 years ago
Arthur Morgan
e6019a89c9
adjust for go1.17
3 years ago
hmol233
31c7141fef
gRPC: add keepalive option `PermitWithoutStream`
3 years ago
hmol233
57b9006d26
gRPC: add keepalive option for server
3 years ago
hmol233
d9d04a230f
Add h2 & gRPC health check
3 years ago
hmol233
3dc9fba20d
gRPC: Use `PathEscape` encoded service name
3 years ago
hmol233
86a8fb5d84
Move `DomainStrategy` & `DialerProxy` to `DialSystem`
...
Fix https://github.com/XTLS/Xray-core/issues/608
3 years ago
Bhoppi Chaw
2220411644
fix new cert issuing is incorrectly delayed
4 years ago
hmol233
3b8618b379
Fix linkname
4 years ago
hmol233
e8a8465220
Fix reject unknown sni with single cert
4 years ago
hmol233
1f92b948c0
Fix errNoCertificates
4 years ago
hmol233
53b99efe78
Add: reject unknown SNI
...
Co-Authored-By: 玖柒Max <60207794+jiuqi9997@users.noreply.github.com>
4 years ago
Bhoppi Chaw
bf94fb53ca
Fix QUIC disconnecting issue ( #475 )
...
Co-authored-by: RPRX <63339210+rprx@users.noreply.github.com>
4 years ago
lucifer
1d13a8da49
fix grpc dial ipv6 address ( #476 )
4 years ago
RPRX
4bf8b6d89c
Fix uTLS fingerprints support
...
Thank @HirbodBehnam https://github.com/XTLS/Xray-core/issues/461
4 years ago
秋のかえで
7f2fad73d4
Chore: Upgrade dependencies ( #432 )
...
Co-authored-by: RPRX <63339210+rprx@users.noreply.github.com>
4 years ago
Jim Han
3ed14c2fcd
Fix: gRPC & HTTP/2 dialer ( #445 )
4 years ago
risetechlab
b63049f404
Fix: TFO AsIs bug ( #452 )
4 years ago
RPRX
a9e11075d1
Add uTLS fingerprints support ( #451 )
4 years ago
Jim Han
e564d9ef7e
Fix: TCP & WS override AcceptProxyProtocol ( #425 )
4 years ago
RPRX
e0910ab4d9
Update dialer.html
4 years ago
RPRX
d46af8b5d4
Add WSS Browser Dialer support ( #421 )
4 years ago
Jim Han
0470381fe2
Fix: gRPC multi accepting empty bytes ( #411 )
4 years ago
maskedeken
36961ed882
Add remote addr to gRPC transport layer conn ( #382 )
...
Co-authored-by: RPRX <63339210+rprx@users.noreply.github.com>
4 years ago
RPRX
a0a32ee00d
Add gRPC Transport support ( #356 )
...
Co-authored-by: JimhHan <50871214+JimhHan@users.noreply.github.com>
4 years ago
RPRX
60b06877bf
Add WebSocket 0-RTT support ( #375 )
4 years ago
RPRX
819717d278
Fix https://github.com/XTLS/Xray-core/issues/366
4 years ago
Jim Han
d7cd71b741
Resolve conflicting changes in DNS #309 #341 ( #346 )
...
Co-authored-by: yuhan6665 <1588741+yuhan6665@users.noreply.github.com>
4 years ago
Jim Han
db32ce6fd9
Enhance DNS and Dialer ( #341 )
4 years ago
risetechlab
ad1807dd99
Enhance TCP Fast Open ( #310 )
4 years ago
Jim Han
7fb1f65354
Fix https://github.com/XTLS/Xray-core/issues/289 ( #300 )
4 years ago
RPRX
8b9c0ae593
Enable (X)TLS hot reloading by default ( #281 )
...
Super BiuBiu
4 years ago
秋のかえで
347d9735da
Remove (x)tls.WithNextProto("h2") in tcp/hub.go ( #260 )
4 years ago