Disallow insecure when pinned cert (#8239)

This commit is contained in:
DHR60
2025-11-02 19:01:58 +08:00
committed by GitHub
parent 8b1105c7e2
commit ed2c77062e
2 changed files with 2 additions and 0 deletions

View File

@@ -269,6 +269,7 @@ public partial class CoreConfigSingboxService
.Select(s => s.Replace("\r\n", "\n")) .Select(s => s.Replace("\r\n", "\n"))
.ToList() ?? new(); .ToList() ?? new();
tls.certificate = certs.Count > 0 ? certs : null; tls.certificate = certs.Count > 0 ? certs : null;
tls.insecure = false;
} }
else else
{ {

View File

@@ -298,6 +298,7 @@ public partial class CoreConfigV2rayService
} }
tlsSettings.certificates = certsettings; tlsSettings.certificates = certsettings;
tlsSettings.disableSystemRoot = true; tlsSettings.disableSystemRoot = true;
tlsSettings.allowInsecure = false;
} }
streamSettings.tlsSettings = tlsSettings; streamSettings.tlsSettings = tlsSettings;
} }