yuhan6665
d11d72be6c
Update proto file and fix protoc version parsing
...
The new protoc cli return version v23.1,
so we parse the file version v4.23.1 without "4."
1 year ago
RPRX
beb603af06
Allow IP address ServerName when "serverName" is not configured
...
In this case, TLS Client Hello will not have SNI (RFC 6066, Section 3)
2 years ago
Yue Yin
03b8c094de
Support SPKI Fingerprint Pinning
...
Support SPKI Fingerprint Pinning for TLSObject
2 years ago
RPRX
4d5c3195d2
Refine random
...
Fixes https://github.com/XTLS/Xray-core/issues/1666
2 years ago
RPRX
f32921df30
Refine randomized
...
But we should avoid using it unless we have to, see
https://github.com/refraction-networking/utls/pull/157#issuecomment-1417156797
2 years ago
RPRX
dc72cf2c78
Refine fingerprints
...
Fixes https://github.com/XTLS/Xray-core/issues/1577
2 years ago
RPRX
b70912799b
Generate *.pb.go files with protoc v3.21.12
...
https://github.com/protocolbuffers/protobuf/releases/tag/v21.12
go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.28
go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.2
go run ./infra/vprotogen
2 years ago
mra9776
f571aa72df
uTLS PinnedPeerCertificateChainSha256 ( #1556 )
...
* Add tests for utls PinnedPeerCertificateChain
* Fix utls not checking PinnedPeerCertificate
Co-authored-by: ahmadi <ahmadi@meshkan.com>
2 years ago
yuhan6665
3fb67f065a
Add fingerprint xray_random ( #1540 )
...
* Add fingerprint xray_random
xray_random means to pick a random uTLS fingerprint at the core startup
This way, the fingerprint is stable for a user for some days. While there is no identifiable signature for the whole xray community
* Fingerprint "random" refine
Exclude old fingerprint from RNG
2 years ago
yuhan6665
32ce7cd730
Add new uTLS fingerprints
...
- correct safari
- new format is the variable name in https://github.com/refraction-networking/utls/blob/master/u_common.go#L163
- notable ones "HelloChrome_106_Shuffle", "Hello360_Auto", "HelloQQ_Auto"
2 years ago
yuhan6665
c4fbdf1b78
Run core/format.go
2 years ago
Hirbod Behnam
da0b13cca0
Added uTLS to gRPC ( #1264 )
...
* Added uTLS to gRPC
* Use base 16 of ciphers as StandardName
2 years ago
Hirbod Behnam
1f93cbbc5d
Added utls to websocket ( #1256 )
...
* Added utls to websocket
* Slightly better code
One less allocation
2 years ago
Hirbod Behnam
93c7ebe382
Added utls to http2 transport
2 years ago
yuhan6665
8117b66949
Generate all protos
2 years ago
世界
f046feb9ca
Reformat code
3 years ago
yuhan6665
acb81ebe3d
Verify peer cert function for better man in the middle prevention ( #746 )
...
* verify peer cert function for better man in the middle prevention
* publish cert chain hash generation algorithm
* added calculation of certificate hash as separate command and tlsping, use base64 to represent fingerprint to align with jsonPb
* apply coding style
* added test case for pinned certificates
* refactored cert pin
* pinned cert test
* added json loading of the PinnedPeerCertificateChainSha256
* removed tool to prepare for v5
* Add server cert pinning for Xtls
Change command "xray tls certChainHash" to xray style
Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>
3 years ago
yuhan6665
e286cdcaa8
Style: format code by gofumpt ( #761 )
3 years ago
hmol233
7033f7cf5f
Fix: protobuf file ( #724 )
3 years ago
Arthur Morgan
ffc2f7c4e2
Style: format code
3 years ago
WeidiDeng
b0b2aaa70c
Fixed refresh error when multiple certificates exist ( #663 )
...
* Fix when there are multiple certs, after refresh from file all will be the same as the last.
3 years ago
yuhan6665
42d158bd85
vprotogen refine ( #717 )
...
* Update all proto files with existing vprotogen
* Chore: remove protoc-gen-gofast
* Feat: vprotogen adds version detector to block generation code from old protobuf version
* Feat: vprotogen refine logic
Co-authored-by: Loyalsoldier <10487845+Loyalsoldier@users.noreply.github.com>
3 years ago
Arthur Morgan
7a9e72b133
Merge pull request #589 from bhoppi/main
...
Fix: new cert issuing is incorrectly delayed
3 years ago
Bhoppi Chaw
2220411644
fix new cert issuing is incorrectly delayed
4 years ago
hmol233
e8a8465220
Fix reject unknown sni with single cert
4 years ago
hmol233
1f92b948c0
Fix errNoCertificates
4 years ago
hmol233
53b99efe78
Add: reject unknown SNI
...
Co-Authored-By: 玖柒Max <60207794+jiuqi9997@users.noreply.github.com>
4 years ago
RPRX
4bf8b6d89c
Fix uTLS fingerprints support
...
Thank @HirbodBehnam https://github.com/XTLS/Xray-core/issues/461
4 years ago
RPRX
a9e11075d1
Add uTLS fingerprints support ( #451 )
4 years ago
RPRX
8b9c0ae593
Enable (X)TLS hot reloading by default ( #281 )
...
Super BiuBiu
4 years ago
eMeab
81d993158f
Support hot reloading of certificate and key files ( #225 )
4 years ago
eMeab
c13b8ec9bb
Fix OCSP Stapling ( #172 )
...
Co-authored-by: RPRX <63339210+rprx@users.noreply.github.com>
4 years ago
RPRX
7df135a5c4
Disable session resumption by default
...
https://github.com/v2fly/v2ray-core/issues/557#issuecomment-751962569
4 years ago
RPRX
a78db47571
Adjust OCSP Stapling
4 years ago
eMeab
3d7e86efba
Add OCSP Stapling for TLS & XTLS ( #92 )
4 years ago
RPRX
ff9bb2d8df
Optimize cipherSuites setting loader
4 years ago
RPRX
38faac5ffc
Adjust config loader of TLS & XTLS
4 years ago
eMeab
88dfed931b
Add cipherSuites setting for TLS & XTLS ( #78 )
4 years ago
RPRX
ed0e9b12dc
Adjust ProtoBuf of TLS & XTLS
4 years ago
eMeab
dab978749c
Add minVersion setting for TLS & XTLS ( #77 )
4 years ago
RPRX
f8faf3c8b8
Removal: confonly
4 years ago
RPRX
16544c18ab
v1.1.0
4 years ago
RPRX
c7f7c08ead
v1.0.0
4 years ago