feat: add cipherSuites option and unsafe fingerprint to TLS UI settings - #9716
Open
patterniha wants to merge 26 commits into
Open
feat: add cipherSuites option and unsafe fingerprint to TLS UI settings#9716patterniha wants to merge 26 commits into
cipherSuites option and unsafe fingerprint to TLS UI settings#9716patterniha wants to merge 26 commits into
Conversation
… missing ConfigHandler copy
…safe-fingerprint-options feat: add cipherSuites option and "unsafe" fingerprint to TLS UI settings
…low-up to #1) The "unsafe" fingerprint added in #1 is Xray-only: sing-box passes the node fingerprint into tls.utls.fingerprint and rejects unknown uTLS names at startup, so any node with fingerprint "unsafe" running on the sing-box core failed to connect. This is also reachable indirectly via AddServerCommon, which stamps the global default fingerprint (settable to "unsafe" in options) onto REALITY nodes. Skip uTLS in that case; plain Go TLS matches what Xray's "unsafe" means anyway. Also reset CipherSuites in AddHysteria2Server and AddNaiveServer alongside the existing Fingerprint/Alpn resets, since #1 disabled the textbox for these protocols but left stale values in the database. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
fix: sing-box "unsafe" fingerprint guard and CipherSuites resets (follow-up to #1)
The fork already round-trips its custom TLS fields (ech, vcn, pcs, pqv) through share-link query parameters and the VMess QR-code JSON, but CipherSuites was missing, so sharing a profile silently dropped it. Add a "cs" query parameter to BaseFmt (exported inside the TLS-only block alongside alpn, since cipherSuites is TLS-only) and a "cs" field to VmessQRCode, mapped in VmessFmt. The key matches the one used by the v2rayNG fork (patterniha/v2rayNG#3) so links carrying cipher suites interop between the two clients. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
feat: round-trip CipherSuites in share links and VMess QR code
sing-box supports cipher_suites on outbound TLS (a list of the same Go TLS names Xray takes as a colon-separated string), so the setting no longer silently does nothing when a profile runs on the sing-box core. Add cipher_suites to Tls4Sbox and map it in GenOutboundTls for the TLS branch only (REALITY uses uTLS where cipher suites do not apply), splitting the stored string on ":" or ",". Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
feat: apply CipherSuites to sing-box TLS outbounds
patterniha
changed the title
cipherSuites option and unsafe fingerprint to TLS UI settings
…fe-fingerprint features
Contributor
Author
|
? |
…eam's allowInsecure removal in BaseFmt
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Corresponding to: 2dust/v2rayNG#5900