Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

shadowtls-server填写1.1.1.1后,客户端可以随意更换握手网站(TLS1.3域名) #122

Open
LutongZhu opened this issue Oct 28, 2024 · 0 comments

Comments

@LutongZhu
Copy link

LutongZhu commented Oct 28, 2024

之前是看到VLESS-TCP-XTLS-Vision-REALITY示例配置中需要填写支持 TLS1.3 和 h2 的网站,也可以使用 1.1.1.1:443 作为目标。
今天测试shadowtls-server也是可以配置1.1.1.1,且客户端可以随意更换握手网站(TLS1.3域名)后可以正常使用,不知道是否有不可预知问题?

sing-box服务端配置文件

{
      "type": "shadowtls",
      "listen": "::",
      "listen_port": prot,
      "detour": "shadowsocks-in",
      "version": 3,
      "users": [
        {
          "password": "password"
        }
      ],
      "handshake": {
        "server": "1.1.1.1",
        "server_port": 443
      },
      "strict_mode": true
    },
    {
      "type": "shadowsocks",
      "tag": "shadowsocks-in",
      "listen": "127.0.0.1",
      "listen_port": prot,
      "method": "2022-blake3-aes-128-gcm",
      "password": "password==",
      "multiplex": {
        "enabled": true
      }
    }

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant