Skip to content

Commit ed2c770

Browse files
authored
Disallow insecure when pinned cert (2dust#8239)
1 parent 8b1105c commit ed2c770

2 files changed

Lines changed: 2 additions & 0 deletions

File tree

v2rayN/ServiceLib/Services/CoreConfig/Singbox/SingboxOutboundService.cs

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -269,6 +269,7 @@ private async Task<int> GenOutboundTls(ProfileItem node, Outbound4Sbox outbound)
269269
.Select(s => s.Replace("\r\n", "\n"))
270270
.ToList() ?? new();
271271
tls.certificate = certs.Count > 0 ? certs : null;
272+
tls.insecure = false;
272273
}
273274
else
274275
{

v2rayN/ServiceLib/Services/CoreConfig/V2ray/V2rayOutboundService.cs

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -298,6 +298,7 @@ private async Task<int> GenBoundStreamSettings(ProfileItem node, Outbounds4Ray o
298298
}
299299
tlsSettings.certificates = certsettings;
300300
tlsSettings.disableSystemRoot = true;
301+
tlsSettings.allowInsecure = false;
301302
}
302303
streamSettings.tlsSettings = tlsSettings;
303304
}

0 commit comments

Comments
 (0)