Browse Source

feat: copy some certificate related options for uTLS (#3240)

秋野かえで 11 months ago
parent
commit
9ccb080dcc
1 changed files with 9 additions and 5 deletions
  1. 9 5
      transport/internet/tls/utls/utls.go

+ 9 - 5
transport/internet/tls/utls/utls.go

@@ -106,11 +106,15 @@ func (u uTLSClientConnection) GetConnectionApplicationProtocol() (string, error)
 
 
 func uTLSConfigFromTLSConfig(config *systls.Config) (*utls.Config, error) { // nolint: unparam
 func uTLSConfigFromTLSConfig(config *systls.Config) (*utls.Config, error) { // nolint: unparam
 	uconfig := &utls.Config{
 	uconfig := &utls.Config{
-		Rand:       config.Rand,
-		Time:       config.Time,
-		RootCAs:    config.RootCAs,
-		NextProtos: config.NextProtos,
-		ServerName: config.ServerName,
+		Rand:                  config.Rand,
+		Time:                  config.Time,
+		RootCAs:               config.RootCAs,
+		NextProtos:            config.NextProtos,
+		ServerName:            config.ServerName,
+		VerifyPeerCertificate: config.VerifyPeerCertificate,
+		InsecureSkipVerify:    config.InsecureSkipVerify,
+		ClientAuth:            utls.ClientAuthType(config.ClientAuth),
+		ClientCAs:             config.ClientCAs,
 	}
 	}
 	return uconfig, nil
 	return uconfig, nil
 }
 }