From ed2c77062ef71358357490504e030bc9f364dca2 Mon Sep 17 00:00:00 2001
From: DHR60 <dehongren60@gmail.com>
Date: Sun, 2 Nov 2025 19:01:58 +0800
Subject: [PATCH] Disallow insecure when pinned cert (#8239)

---
 .../Services/CoreConfig/Singbox/SingboxOutboundService.cs        | 1 +
 .../ServiceLib/Services/CoreConfig/V2ray/V2rayOutboundService.cs | 1 +
 2 files changed, 2 insertions(+)

diff --git a/v2rayN/ServiceLib/Services/CoreConfig/Singbox/SingboxOutboundService.cs b/v2rayN/ServiceLib/Services/CoreConfig/Singbox/SingboxOutboundService.cs
index e9d35a89..9cffb352 100644
--- a/v2rayN/ServiceLib/Services/CoreConfig/Singbox/SingboxOutboundService.cs
+++ b/v2rayN/ServiceLib/Services/CoreConfig/Singbox/SingboxOutboundService.cs
@@ -269,6 +269,7 @@ public partial class CoreConfigSingboxService
                         .Select(s => s.Replace("\r\n", "\n"))
                         .ToList() ?? new();
                     tls.certificate = certs.Count > 0 ? certs : null;
+                    tls.insecure = false;
                 }
                 else
                 {
diff --git a/v2rayN/ServiceLib/Services/CoreConfig/V2ray/V2rayOutboundService.cs b/v2rayN/ServiceLib/Services/CoreConfig/V2ray/V2rayOutboundService.cs
index 3f1f7c5f..73a3a1fd 100644
--- a/v2rayN/ServiceLib/Services/CoreConfig/V2ray/V2rayOutboundService.cs
+++ b/v2rayN/ServiceLib/Services/CoreConfig/V2ray/V2rayOutboundService.cs
@@ -298,6 +298,7 @@ public partial class CoreConfigV2rayService
                     }
                     tlsSettings.certificates = certsettings;
                     tlsSettings.disableSystemRoot = true;
+                    tlsSettings.allowInsecure = false;
                 }
                 streamSettings.tlsSettings = tlsSettings;
             }