chore: improve fingerprint verifier handle non-leaf certificate

This commit is contained in:
wwqgtxx
2025-09-17 11:18:14 +08:00
parent 30bead4e2e
commit 7e71d21ab4
5 changed files with 402 additions and 25 deletions

View File

@@ -123,7 +123,7 @@ func GetTLSConfig(opt Option) (tlsConfig *tls.Config, err error) {
}
if len(opt.Fingerprint) > 0 {
tlsConfig.VerifyPeerCertificate, err = NewFingerprintVerifier(opt.Fingerprint)
tlsConfig.VerifyPeerCertificate, err = NewFingerprintVerifier(opt.Fingerprint, tlsConfig.Time)
if err != nil {
return nil, err
}