Disallow insecure when pinned cert (#8239)
This commit is contained in:
@@ -269,6 +269,7 @@ public partial class CoreConfigSingboxService
|
|||||||
.Select(s => s.Replace("\r\n", "\n"))
|
.Select(s => s.Replace("\r\n", "\n"))
|
||||||
.ToList() ?? new();
|
.ToList() ?? new();
|
||||||
tls.certificate = certs.Count > 0 ? certs : null;
|
tls.certificate = certs.Count > 0 ? certs : null;
|
||||||
|
tls.insecure = false;
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
|
|||||||
@@ -298,6 +298,7 @@ public partial class CoreConfigV2rayService
|
|||||||
}
|
}
|
||||||
tlsSettings.certificates = certsettings;
|
tlsSettings.certificates = certsettings;
|
||||||
tlsSettings.disableSystemRoot = true;
|
tlsSettings.disableSystemRoot = true;
|
||||||
|
tlsSettings.allowInsecure = false;
|
||||||
}
|
}
|
||||||
streamSettings.tlsSettings = tlsSettings;
|
streamSettings.tlsSettings = tlsSettings;
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user