Reject IP literal server name with TLS spoof

2026-09-17 05:40:27 +00:00 · 2026-08-30 17:41:39 +08:00
parent 3e8ea4e590
commit 2ddfecb47a
1 changed files with 1 additions and 1 deletions
@@ -30,7 +30,7 @@ func parseTLSSpoofOptions(serverName string, options option.OutboundTLSOptions)
 	if !tlsspoof.PlatformSupported {
 		return "", 0, E.New("`spoof` is not supported on this platform")
 	}
-	if options.DisableSNI || serverName == "" {
+	if options.DisableSNI || serverName == "" || M.ParseAddr(serverName).IsValid() {
 		return "", 0, E.New("`spoof` requires TLS ClientHello with SNI")
 	}
 	method, err := tlsspoof.ParseMethod(options.SpoofMethod)