3x-ui/internal
n0ctal bab39393f1
fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)
* fix(nodes): validate every certificate in the node mTLS trust bundle

AppendCertsFromPEM reports success once a single certificate parses, so a
trust bundle whose later entries are damaged or truncated was accepted with
those entries silently absent from the pool. Parse and validate every PEM
block instead, and reject the bundle if any of them is malformed.

* fix(mtls): reject malformed certificate bundle layout

---------

Co-authored-by: n0ctal <293235942+n0ctal@users.noreply.github.com>
2026-08-15 21:31:31 +02:00
..
config feat(nodes): opt-in encryption at rest for the outbound node API token (#6186) 2026-08-15 16:48:50 +02:00
crypto/nodetoken feat(nodes): opt-in encryption at rest for the outbound node API token (#6186) 2026-08-15 16:48:50 +02:00
database feat(sub): add per-client subscription HWID limits (#5802) 2026-08-15 16:50:20 +02:00
eventbus
logger
mtproto fix(mtproto): synchronize child-process lifecycle (#6141) 2026-07-29 20:56:26 +02:00
sub fix(sub): keep copy page within mobile viewport 2026-08-15 21:16:13 +02:00
tunnelmonitor
util fix(outbound): import Hysteria2 salamander properly from standard obfs params (#6166) 2026-08-14 16:43:29 +02:00
web fix(nodes): validate every certificate in the node mTLS trust bundle (#6188) 2026-08-15 21:31:31 +02:00
xray feat(inbounds): improve multi-node online attribution (#6164) 2026-08-15 17:40:35 +02:00