Remzona54/Xray-core
1
0
Fork 0
mirror of https://github.com/XTLS/Xray-core.git synced 2026-10-12 07:47:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

Fix AUTHORITY_VERIFY

Browse source
This commit is contained in:
Fangliding 2026-06-17 21:53:44 +08:00
parent 1b8d07f1e3
commit 65d50cc638
No known key found for this signature in database
GPG key ID: A1E6A14761C93303
2 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
transport/internet/tls/config.go
View file

@ -38,6 +38,9 @@ func ParseCertificate(c *cert.Certificate) *Certificate {
func (c *Config) loadSelfCertPool() (*x509.CertPool, error) {
root := x509.NewCertPool()
for _, cert := range c.Certificate {
if cert.Usage != Certificate_AUTHORITY_VERIFY {
continue
}
if !root.AppendCertsFromPEM(cert.Certificate) {
return nil, errors.New("failed to append cert").AtWarning()
}

3
transport/internet/tls/config_other.go
View file

@ -47,6 +47,9 @@ func (c *Config) getCertPool() (*x509.CertPool, error) {
return nil, errors.New("system root").AtWarning().Base(err)
}
for _, cert := range c.Certificate {
if cert.Usage != Certificate_AUTHORITY_VERIFY {
continue
}
if !pool.AppendCertsFromPEM(cert.Certificate) {
return nil, errors.New("append cert to root").AtWarning().Base(err)
}