diff --git a/web/assets/js/model/xray.js b/web/assets/js/model/xray.js
index 97110ae9..291f0adc 100644
--- a/web/assets/js/model/xray.js
+++ b/web/assets/js/model/xray.js
@@ -1138,7 +1138,7 @@ class Inbound extends XrayCommonClass {
     }
 
     canEnableTls() {
-        if(![Protocols.VMESS, Protocols.VLESS, Protocols.TROJAN].includes(this.protocol)) return false;
+        if(![Protocols.VMESS, Protocols.VLESS, Protocols.TROJAN, Protocols.SHADOWSOCKS].includes(this.protocol)) return false;
         return ["tcp", "ws", "http", "quic", "grpc"].includes(this.network);
     }
 
diff --git a/web/html/xui/form/tls_settings.html b/web/html/xui/form/tls_settings.html
index a77bec40..db92eea5 100644
--- a/web/html/xui/form/tls_settings.html
+++ b/web/html/xui/form/tls_settings.html
@@ -5,7 +5,6 @@
     <a-form-item label='{{ i18n "security" }}'>
         <a-radio-group v-model="inbound.stream.security" button-style="solid">
             <a-radio-button value="none">{{ i18n "none" }}</a-radio-button>
-            <a-radio-button value="tls">TLS</a-radio-button>
             <a-tooltip>
                 <template slot="title">
                     <span>{{ i18n "pages.inbounds.xtlsDesc" }}</span>
@@ -18,6 +17,7 @@
                 </template>
                 <a-radio-button v-if="inbound.canEnableReality()" value="reality">Reality</a-radio-button>
             </a-tooltip>
+            <a-radio-button value="tls">TLS</a-radio-button>
         </a-radio-group>
     </a-form-item>
 </a-form>