Niko/sing-box
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Reject IP literal server name with TLS spoof

Browse source
This commit is contained in:
世界 2026-04-16 18:00:13 +08:00
parent 4a93b47a0a
commit 9dc8d445f2
No known key found for this signature in database
GPG key ID: CD109927C34A63C4
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
common/tls/client.go
View file

@ -30,7 +30,7 @@ func parseTLSSpoofOptions(serverName string, options option.OutboundTLSOptions)
if !tlsspoof.PlatformSupported {
return "", 0, E.New("`spoof` is not supported on this platform")
}
if options.DisableSNI || serverName == "" {
if options.DisableSNI || serverName == "" || M.ParseAddr(serverName).IsValid() {
return "", 0, E.New("`spoof` requires TLS ClientHello with SNI")
}
method, err := tlsspoof.ParseMethod(options.SpoofMethod)