Xray-core/transport/internet/tls/config.proto

80 lines
1.9 KiB
Protocol Buffer
Raw Normal View History

2020-11-25 11:01:53 +00:00
syntax = "proto3";
package xray.transport.internet.tls;
option csharp_namespace = "Xray.Transport.Internet.Tls";
2020-12-04 01:36:16 +00:00
option go_package = "github.com/xtls/xray-core/transport/internet/tls";
2020-11-25 11:01:53 +00:00
option java_package = "com.xray.transport.internet.tls";
option java_multiple_files = true;
message Certificate {
// TLS certificate in x509 format.
2020-12-25 15:10:12 +00:00
bytes certificate = 1;
2020-11-25 11:01:53 +00:00
// TLS key in x509 format.
2020-12-25 15:10:12 +00:00
bytes key = 2;
2020-11-25 11:01:53 +00:00
enum Usage {
ENCIPHERMENT = 0;
AUTHORITY_VERIFY = 1;
AUTHORITY_ISSUE = 2;
}
Usage usage = 3;
2020-12-25 08:01:20 +00:00
uint64 ocsp_stapling = 4;
// TLS certificate path
string certificate_path = 5;
// TLS Key path
string key_path = 6;
// If true, one-Time Loading
bool One_time_loading = 7;
2020-11-25 11:01:53 +00:00
}
message Config {
// Whether or not to allow self-signed certificates.
bool allow_insecure = 1;
// List of certificates to be served on server.
repeated Certificate certificate = 2;
// Override server name.
string server_name = 3;
// Lists of string as ALPN values.
repeated string next_protocol = 4;
// Whether or not to enable session (ticket) resumption.
bool enable_session_resumption = 5;
2020-11-25 11:01:53 +00:00
// If true, root certificates on the system will not be loaded for
// verification.
2020-12-16 15:59:04 +00:00
bool disable_system_root = 6;
2020-12-16 08:50:18 +00:00
// The minimum TLS version.
2020-12-16 15:59:04 +00:00
string min_version = 7;
// The maximum TLS version.
string max_version = 8;
2020-12-16 15:59:04 +00:00
// Specify cipher suites, except for TLS 1.3.
string cipher_suites = 9;
2020-12-16 15:59:04 +00:00
// Whether the server selects its most preferred ciphersuite.
bool prefer_server_cipher_suites = 10;
2021-03-29 10:08:29 +00:00
// TLS Client Hello fingerprint (uTLS).
string fingerprint = 11;
bool reject_unknown_sni = 12;
/* @Document A pinned certificate chain sha256 hash.
@Document If the server's hash does not match this value, the connection will be aborted.
@Document This value replace allow_insecure.
@Critical
*/
repeated bytes pinned_peer_certificate_chain_sha256 = 13;
2020-11-25 11:01:53 +00:00
}