feat(tls): surface pinnedPeerCertSha256 in panel, share links, and subs

Adds a panel-only `pinnedPeerCertSha256` field on TLS settings with a tags input and a random-hash generator. The hashes ride share links as `pcs` (v2rayN-compatible), Clash sub as `pin-sha256`, and JSON sub as `pinnedPeerCertSha256`, while remaining stripped from the run-config sent to xray-core.
2026-09-23 10:17:09 +08:00 · 2026-05-28 19:32:10 +02:00
parent c5b5606bf5
commit 3f0b7fbe97
23 changed files with 320 additions and 1 deletions
@@ -536,6 +536,10 @@
        "buildChain": "构建证书链",
        "echKey": "ECH key",
        "echConfig": "ECH 配置",
+        "pinnedPeerCertSha256": "固定对端证书 SHA-256",
+        "pinnedPeerCertSha256Tip": "对端证书的 Base64 编码 SHA-256 哈希。仅面板使用 — 不写入服务器的 xray 配置，但会包含在分享链接中，以便客户端固定证书。",
+        "pinnedPeerCertSha256Placeholder": "base64 哈希，逗号分隔",
+        "generateRandomPin": "生成随机哈希",
        "getNewEchCert": "获取新 ECH 证书",
        "show": "显示",
        "xver": "Xver",