38 commits

Author	SHA1	Message	Date
风扇滑翔翼	fb7a9d8d61	TLS client & server: Support Encrypted Client Hello (ECH) (#3813) ... b9a72a4a26 --------- Co-authored-by: yuhan6665 <1588741+yuhan6665@users.noreply.github.com>	2025-07-26 08:47:27 +00:00
风扇滑翔翼	cbcab89c7e	Commands: Display Post-Quantum key exchange in tls ping (#4857) ... https://github.com/XTLS/Xray-core/pull/4857#issuecomment-3064964301	2025-07-19 01:14:56 +00:00
patterniha	2d3210e4b8	Env: Add XRAY_LOCATION_CERT variable (#4536) ... https://github.com/XTLS/Xray-core/issues/4531#issuecomment-2746155941 Fixes https://github.com/XTLS/Xray-core/issues/4531 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2025-03-24 13:02:35 +00:00
RPRX	d4c7cd02fd	MITM freedom RAW TLS: Allow "fromMitm" to be written at any position in verifyPeerCertInNames, Add checking for alpn "fromMitm" ... https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2643340434	2025-02-08 12:11:25 +00:00
RPRX	c6a31f457c	MITM: Allow using local received SNI in the outgoing serverName & verifyPeerCertInNames ... https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2637370175 Local received SNI was sent by browser/app. In freedom RAW's `tlsSettings`, set `"serverName": "fromMitm"` to forward it to the real website. In freedom RAW's `tlsSettings`, set `"verifyPeerCertInNames": ["fromMitm"]` to use all possible names to verify the certificate.	2025-02-06 07:37:30 +00:00
RPRX	2522cfd7be	DNS DoH: Add h2c Remote mode (with TLS serverNameToVerify) ... https://github.com/XTLS/Xray-core/issues/4313#issuecomment-2609339864 Applies https://github.com/refraction-networking/utls/pull/161 Closes https://github.com/XTLS/Xray-core/issues/4313	2025-01-25 10:51:44 +00:00
风扇滑翔翼	571777483b	TLS: Add CurvePreferences (to enable kyber768) (#3991) ... Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2024-11-11 04:21:28 +00:00
zonescape	83bab5dd90	Chore: Run gofmt (#3990)	2024-11-09 11:16:11 +00:00
lelemka0	4531a7e228	CertificateObject: Enable auto-reload for cacert & Add buildChain & Fixes (#3607)	2024-07-29 06:58:58 +00:00
yuhan6665	079d0bd8a9	Refactor log (#3446) ... * Refactor log * Add new log methods * Fix logger test * Change all logging code * Clean up pathObj * Rebase to latest main * Remove invoking method name after the dot	2024-06-29 14:32:57 -04:00
RPRX	61800fcc66	Revert "nosni" ... https://github.com/XTLS/Xray-core/pull/3214#issuecomment-2078502477	2024-04-26 02:27:22 +00:00
Allo	fbc56b88da	chore: remove the usage of some deprecated tls properties	2024-04-13 17:56:35 -04:00
风扇滑翔翼	ec2224974d	Add "nosni" option to send empty SNI (#3214) ... * Allow not to send SNI * Allow reality not to send SNI	2024-04-01 11:08:37 -04:00
yuhan6665	6f092bd212	Add "masterKeyLog" in TLS config (#2758) ... * Add "enableMasterKeyLog" in TLS config Turn on the debug option for Wireshark to decrypt traffic * Change to "masterKeyLog" to configure a path	2023-11-27 10:08:34 -05:00
RPRX	beb603af06	Allow IP address ServerName when "serverName" is not configured ... In this case, TLS Client Hello will not have SNI (RFC 6066, Section 3)	2023-03-26 10:57:20 +00:00
Yue Yin	03b8c094de	Support SPKI Fingerprint Pinning ... Support SPKI Fingerprint Pinning for TLSObject	2023-02-24 11:47:00 -05:00
yuhan6665	acb81ebe3d	Verify peer cert function for better man in the middle prevention (#746) ... * verify peer cert function for better man in the middle prevention * publish cert chain hash generation algorithm * added calculation of certificate hash as separate command and tlsping, use base64 to represent fingerprint to align with jsonPb * apply coding style * added test case for pinned certificates * refactored cert pin * pinned cert test * added json loading of the PinnedPeerCertificateChainSha256 * removed tool to prepare for v5 * Add server cert pinning for Xtls Change command "xray tls certChainHash" to xray style Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>	2021-10-22 12:38:40 +08:00
yuhan6665	e286cdcaa8	Style: format code by gofumpt (#761)	2021-10-20 00:57:14 +08:00
WeidiDeng	b0b2aaa70c	Fixed refresh error when multiple certificates exist (#663) ... * Fix when there are multiple certs, after refresh from file all will be the same as the last.	2021-09-18 03:48:22 +08:00
Arthur Morgan	7a9e72b133	Merge pull request #589 from bhoppi/main ... Fix: new cert issuing is incorrectly delayed	2021-09-08 00:50:32 +08:00
Bhoppi Chaw	2220411644	fix new cert issuing is incorrectly delayed	2021-06-05 23:32:05 +08:00
hmol233	e8a8465220	Fix reject unknown sni with single cert	2021-05-10 00:28:40 +08:00
hmol233	1f92b948c0	Fix errNoCertificates	2021-05-10 00:11:45 +08:00
hmol233	53b99efe78	Add: reject unknown SNI ... Co-Authored-By: 玖柒Max <60207794+jiuqi9997@users.noreply.github.com>	2021-05-09 23:47:21 +08:00
RPRX	4bf8b6d89c	Fix uTLS fingerprints support ... Thank @HirbodBehnam https://github.com/XTLS/Xray-core/issues/461	2021-04-01 09:15:18 +00:00
RPRX	8b9c0ae593	Enable (X)TLS hot reloading by default (#281) ... Super BiuBiu	2021-02-20 02:15:57 +00:00
eMeab	81d993158f	Support hot reloading of certificate and key files (#225)	2021-02-12 15:33:19 +00:00
eMeab	c13b8ec9bb	Fix OCSP Stapling (#172) ... Co-authored-by: RPRX <63339210+rprx@users.noreply.github.com>	2021-01-30 23:17:07 +00:00
RPRX	7df135a5c4	Disable session resumption by default ... https://github.com/v2fly/v2ray-core/issues/557#issuecomment-751962569	2021-01-01 11:33:09 +00:00
RPRX	a78db47571	Adjust OCSP Stapling	2020-12-25 15:10:12 +00:00
eMeab	3d7e86efba	Add OCSP Stapling for TLS & XTLS (#92)	2020-12-25 08:01:20 +00:00
RPRX	ff9bb2d8df	Optimize cipherSuites setting loader	2020-12-17 09:25:30 +00:00
RPRX	38faac5ffc	Adjust config loader of TLS & XTLS	2020-12-16 15:59:04 +00:00
eMeab	88dfed931b	Add cipherSuites setting for TLS & XTLS (#78)	2020-12-16 12:53:55 +00:00
eMeab	dab978749c	Add minVersion setting for TLS & XTLS (#77)	2020-12-16 05:20:24 +00:00
RPRX	f8faf3c8b8	Removal: confonly	2020-12-11 13:05:29 +08:00
RPRX	16544c18ab	v1.1.0	2020-12-04 09:36:16 +08:00
RPRX	c7f7c08ead	v1.0.0	2020-11-25 19:01:53 +08:00