Meo597 794eab58d4 TLS/REALITY: Restrict master key log file permissions to 0600

2026-10-20 04:12:11 +08:00

..

config_other.go

TLS client: Use Xray-core's built-in RootCAs by default (avoids maliciously injected CA in the OS) (#7105)

2026-10-10 06:53:39 +00:00

config_test.go

TLS config: allowInsecure->pinnedPeerCertSha256; verifyPeerCertInNames->verifyPeerCertByName

2026-01-31 09:32:51 +00:00

config_windows.go

TLS client: Use Xray-core's built-in RootCAs by default (avoids maliciously injected CA in the OS) (#7105)

2026-10-10 06:53:39 +00:00

config.go

TLS/REALITY: Restrict master key log file permissions to 0600

2026-10-20 04:12:11 +08:00

config.pb.go

TLS client: Use Xray-core's built-in RootCAs by default (avoids maliciously injected CA in the OS) (#7105)

2026-10-10 06:53:39 +00:00

config.proto

TLS client: Use Xray-core's built-in RootCAs by default (avoids maliciously injected CA in the OS) (#7105)

2026-10-10 06:53:39 +00:00

ech_test.go

TLS ECH: Update ECH configuration parsing logic to be more robust (#6441)

2026-07-08 11:12:37 +00:00

ech.go

TLS ECH DoH h2c: Support verifyPeerCertByName's "fromMitm" (after dialerProxy, in RAW outbound's tlsSettings) (#6246)

2026-10-10 06:55:46 +00:00

grpc.go

XDNS finalmask: Support DoH ("https://", tlsConfig, domain fronting, etc., quicConfig, Chrome Client Hello by default) with empty HTTP User-Agent (#7140)

2026-10-15 22:41:19 +00:00

pin_test.go

TLS config: allowInsecure->pinnedPeerCertSha256; verifyPeerCertInNames->verifyPeerCertByName

2026-01-31 09:32:51 +00:00

pin.go

TLS client: Simplify cert's verification code (#5656)

2026-02-06 01:57:32 +00:00

tls.go

XDNS finalmask: Support DoH ("https://", tlsConfig, domain fronting, etc., quicConfig, Chrome Client Hello by default) with empty HTTP User-Agent (#7140)

2026-10-15 22:41:19 +00:00

unsafe.go

Fix errNoCertificates

2021-05-10 00:11:45 +08:00