mirrors/Xray-core
0
Fork 0
mirror of https://github.com/XTLS/Xray-core.git synced 2025-06-13 03:49:35 +03:00
Code Issues Releases Activity

Add cipherSuites setting for TLS & XTLS (#78)

Browse Source
This commit is contained in:
eMeab
2020-12-16 20:53:55 +08:00
committed by GitHub
parent 19ce0e99a5
commit 88dfed931b
7 changed files with 212 additions and 110 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
transport/internet/tls/config.go
View File

@ -185,11 +185,12 @@ func (c *Config) GetTLSConfig(opts ...Option) *tls.Config {
}
config := &tls.Config{
ClientSessionCache: globalSessionCache,
RootCAs: root,
InsecureSkipVerify: c.AllowInsecure,
NextProtos: c.NextProtocol,
SessionTicketsDisabled: c.DisableSessionResumption,
ClientSessionCache: globalSessionCache,
RootCAs: root,
InsecureSkipVerify: c.AllowInsecure,
NextProtos: c.NextProtocol,
SessionTicketsDisabled: c.DisableSessionResumption,
PreferServerCipherSuites: c.PreferServerCipherSuites,
}
for _, opt := range opts {
@ -223,6 +224,22 @@ func (c *Config) GetTLSConfig(opts ...Option) *tls.Config {
config.NextProtos = []string{"h2", "http/1.1"}
}
var cipherSuites []uint16
if c.PreferServerCipherSuites && len(c.CipherSuites) > 0 {
cipherSuitesArray := strings.Split(c.CipherSuites, ":")
if len(cipherSuitesArray) > 0 {
all := tls.CipherSuites()
for _, suite := range cipherSuitesArray {
for _, s := range all {
if s.Name == suite {
cipherSuites = append(cipherSuites, s.ID)
}
}
}
}
}
config.CipherSuites = cipherSuites
return config
}