3x-ui/sub
MHSanaei cda7f2ac17
fix(sub): stop external-proxy dest from clobbering TLS SNI
externalProxySNI fell back to ep["dest"] when an external-proxy row had
no SNI of its own, silently overwriting the upstream tlsSettings
serverName already written into the share-link params. Operators using
forceTls=same with a CDN edge IP got SNI=<edge-ip> in the link instead
of the real cert hostname, breaking TLS handshakes.

The fallback is dropped: an explicit ep["sni"] still overrides, but a
blank entry now leaves the upstream SNI in place. Tests updated.
2026-05-28 21:26:24 +02:00
..
default.json dokodemo-door, socks renamed to mixed, tunnel 2025-09-09 13:57:40 +02:00
dist.go feat(inbounds): add sub/client link endpoints; hide panel version on login 2026-05-11 15:03:47 +02:00
links.go feat: complete Zod migration of frontend + bulk client batching (#4599) 2026-05-27 04:26:50 +02:00
links_test.go Feat/multi inbound clients (#4469) 2026-05-19 12:20:24 +02:00
sub.go feat: complete Zod migration of frontend + bulk client batching (#4599) 2026-05-27 04:26:50 +02:00
subClashService.go feat(tls): surface pinnedPeerCertSha256 in panel, share links, and subs 2026-05-28 19:32:10 +02:00
subClashService_test.go fix: address open bug reports (#4539, #4538, #4535, #4531, #4515) (#4545) 2026-05-25 00:08:06 +02:00
subController.go feat: complete Zod migration of frontend + bulk client batching (#4599) 2026-05-27 04:26:50 +02:00
subJsonService.go feat(tls): surface pinnedPeerCertSha256 in panel, share links, and subs 2026-05-28 19:32:10 +02:00
subService.go fix(sub): stop external-proxy dest from clobbering TLS SNI 2026-05-28 21:26:24 +02:00
subService_test.go fix(sub): stop external-proxy dest from clobbering TLS SNI 2026-05-28 21:26:24 +02:00