andre/mihomo
1
0
Fork 0
mirror of https://github.com/MetaCubeX/mihomo.git synced 2026-03-06 22:29:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: simplify masque certificate verification

Browse Source
This commit is contained in:
wwqgtxx
2026-03-06 17:52:06 +08:00
parent 7bdeaabba5
commit 7f772de88c
1 changed files with 3 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
transport/masque/masque.go
View File

@@ -66,25 +66,14 @@ func PrepareTlsConfig(privKey *ecdsa.PrivateKey, peerPubKey *ecdsa.PublicKey, sn
// WARN: SNI is usually not for the endpoint, so we must skip verification
InsecureSkipVerify: true,
// we pin to the endpoint public key
VerifyPeerCertificate: func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error {
if len(rawCerts) == 0 {
return nil
}
VerifyConnection: func(cs tls.ConnectionState) error {
var err error
for _, v := range rawCerts {
cert, er := x509.ParseCertificate(v)
if er != nil {
err = errors.Join(err, er)
continue
}
if er = verfiyCert(cert); er != nil {
for _, cert := range cs.PeerCertificates {
if er := verfiyCert(cert); er != nil {
err = errors.Join(err, er)
continue
}
}
return err
},
}