DNS DoH h2c Remote: Add verifyPeerCertInNames "fromMitm" support

https://github.com/XTLS/Xray-core/issues/4313#issuecomment-2645838663
This commit is contained in:
RPRX 2025-02-08 18:05:41 +00:00 committed by GitHub
parent d4c7cd02fd
commit 613c63b165
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -54,7 +54,12 @@ func NewDoHNameServer(url *url.URL, dispatcher routing.Dispatcher, queryStrategy
if err != nil { if err != nil {
return nil, err return nil, err
} }
link, err := s.dispatcher.Dispatch(toDnsContext(ctx, s.dohURL), dest) dnsCtx := toDnsContext(ctx, s.dohURL)
if h2c {
dnsCtx = session.ContextWithMitmAlpn11(dnsCtx, false) // for insurance
dnsCtx = session.ContextWithMitmServerName(dnsCtx, url.Hostname())
}
link, err := s.dispatcher.Dispatch(dnsCtx, dest)
select { select {
case <-ctx.Done(): case <-ctx.Done():
return nil, ctx.Err() return nil, ctx.Err()