Disallow insecure when pinned cert (#8239)

This commit is contained in:
DHR60 2025-11-02 19:01:58 +08:00 committed by GitHub
parent 8b1105c7e2
commit ed2c77062e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 2 additions and 0 deletions

View file

@ -269,6 +269,7 @@ public partial class CoreConfigSingboxService
.Select(s => s.Replace("\r\n", "\n"))
.ToList() ?? new();
tls.certificate = certs.Count > 0 ? certs : null;
tls.insecure = false;
}
else
{

View file

@ -298,6 +298,7 @@ public partial class CoreConfigV2rayService
}
tlsSettings.certificates = certsettings;
tlsSettings.disableSystemRoot = true;
tlsSettings.allowInsecure = false;
}
streamSettings.tlsSettings = tlsSettings;
}