fix(tls): correct pinned cert SHA-256 hint to hex, not base64

xray-core hex-decodes pinnedPeerCertSha256 and the panel forwards the value as-is into share links and the JSON subscription, so clients hex-decode it too. The tooltip/placeholder wrongly said base64 (copied from the retired pinnedPeerCertificateChainSha256 field), and the "generate random hash" button emitted base64 via btoa, producing an unusable pin. Tooltip/placeholder now say hex across all locales and the generator emits hex.

Closes #4793
This commit is contained in:
MHSanaei
2026-06-02 15:14:17 +02:00
parent 13d02f01fc
commit c9abda7ab8
14 changed files with 27 additions and 29 deletions
+2 -2
View File
@@ -555,8 +555,8 @@
"echKey": "ECH key",
"echConfig": "ECH 設定",
"pinnedPeerCertSha256": "釘選對端憑證 SHA-256",
"pinnedPeerCertSha256Tip": "對端憑證的 Base64 編碼 SHA-256 雜湊。僅面板使用 — 不寫入伺服器的 xray 設定,但會包含在分享連結中,以便用戶端釘選憑證。",
"pinnedPeerCertSha256Placeholder": "base64 雜湊,以逗號分隔",
"pinnedPeerCertSha256Tip": "對端憑證的 SHA-256 雜湊(十六進位字串,如 e8e2d3…),以逗號分隔。僅面板使用 — 不寫入伺服器的 xray 設定,但會包含在分享連結中,以便用戶端釘選憑證。",
"pinnedPeerCertSha256Placeholder": "十六進位雜湊,以逗號分隔",
"generateRandomPin": "產生隨機雜湊",
"getNewEchCert": "取得新 ECH 憑證",
"show": "顯示",