4632984b66
TLS client: Simplify cert's verification code ( #5656 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5655
2026-02-06 01:57:32 +00:00
74c726ff62
Commands: Print CA cert's SHA256 in tls ping ( #5644 )
...
And https://github.com/XTLS/Xray-core/issues/5642#issuecomment-3840806246
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-02-03 21:03:48 +00:00
afcfdbca70
Commands: Print leaf cert's SHA256 in tls ping ( #5628 )
...
And https://github.com/XTLS/Xray-core/pull/5628#issuecomment-3828445442
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-31 13:11:36 +00:00
0ca13452b8
TLS config: Add pinnedPeerCertSha256; Remove pinnedPeerCertificateChainSha256 and pinnedPeerCertificatePublicKeySha256 ( #5154 )
...
Usage: https://github.com/XTLS/Xray-core/pull/5507
---------
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-09 00:11:24 +00:00
ab1fa13ebe
Commands: Fix "with SNI" printing fixed port 443 for tls ping ( #5099 )
2025-09-07 14:12:21 +00:00
5a8e9c25a4
Chore: Migrate to Go 1.25 ( #5024 )
...
* Try to update to go1.25
* Remove unsafe usage
2025-08-15 14:50:35 +00:00
87d8b97d9a
Commands: Output certificate chain's total length in tls ping ( #4933 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2025-07-25 10:18:26 +00:00
446315cf1f
REALITY protocol: Add optional Post-Quantum ML-DSA-65 verification for cert's ExtraExtensions ( #4915 )
...
https://github.com/XTLS/REALITY/commit/00881f67406628275c0e4c778848e0c4dff4a2ee
2025-07-23 02:29:11 +00:00
cbcab89c7e
Commands: Display Post-Quantum key exchange in tls ping ( #4857 )
...
https://github.com/XTLS/Xray-core/pull/4857#issuecomment-3064964301
2025-07-19 01:14:56 +00:00
acb81ebe3d
Verify peer cert function for better man in the middle prevention ( #746 )
...
* verify peer cert function for better man in the middle prevention
* publish cert chain hash generation algorithm
* added calculation of certificate hash as separate command and tlsping, use base64 to represent fingerprint to align with jsonPb
* apply coding style
* added test case for pinned certificates
* refactored cert pin
* pinned cert test
* added json loading of the PinnedPeerCertificateChainSha256
* removed tool to prepare for v5
* Add server cert pinning for Xtls
Change command "xray tls certChainHash" to xray style
Co-authored-by: Shelikhoo <xiaokangwang@outlook.com >
2021-10-22 12:38:40 +08:00
e286cdcaa8
Style: format code by gofumpt ( #761 )
2021-10-20 00:57:14 +08:00
16544c18ab
v1.1.0
2020-12-04 09:36:16 +08:00
风扇滑翔翼