804cff8c55
* fix: skip-cert-verify is true by default * fix: format * fix: typo Co-authored-by: 3andero <3andero@github.com> Co-authored-by: Hellojack <106379370+H1JK@users.noreply.github.com>
41 lines
989 B
Go
41 lines
989 B
Go
package vless
|
|
|
|
import (
|
|
"context"
|
|
"net"
|
|
|
|
tlsC "github.com/Dreamacro/clash/component/tls"
|
|
C "github.com/Dreamacro/clash/constant"
|
|
xtls "github.com/xtls/go"
|
|
)
|
|
|
|
type XTLSConfig struct {
|
|
Host string
|
|
SkipCertVerify bool
|
|
Fingerprint string
|
|
NextProtos []string
|
|
}
|
|
|
|
func StreamXTLSConn(conn net.Conn, cfg *XTLSConfig) (net.Conn, error) {
|
|
xtlsConfig := &xtls.Config{
|
|
ServerName: cfg.Host,
|
|
InsecureSkipVerify: cfg.SkipCertVerify,
|
|
NextProtos: cfg.NextProtos,
|
|
}
|
|
if len(cfg.Fingerprint) == 0 {
|
|
xtlsConfig = tlsC.GetGlobalFingerprintXTLSConfig(xtlsConfig)
|
|
} else {
|
|
var err error
|
|
if xtlsConfig, err = tlsC.GetSpecifiedFingerprintXTLSConfig(xtlsConfig, cfg.Fingerprint); err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
xtlsConn := xtls.Client(conn, xtlsConfig)
|
|
|
|
// fix xtls handshake not timeout
|
|
ctx, cancel := context.WithTimeout(context.Background(), C.DefaultTLSTimeout)
|
|
defer cancel()
|
|
err := xtlsConn.HandshakeContext(ctx)
|
|
return xtlsConn, err
|
|
}
|