MHSanaei 82073c10c9 fix(sub): emit the pinned peer cert sha256 in Clash subscriptions ...

The Clash stream builder computed tlsSettings["pin-sha256"] from the inbound's
pinnedPeerCertSha256, but applySecurity's tls case never copied it onto the
proxy, so it was written with no reader and silently dropped. Clash subscribers
lost certificate pinning while JSON subscribers kept it. Surface pin-sha256 on
the proxy in the tls case, matching the JSON emitter.

2026-07-15 02:41:49 +02:00

..

config

v3.5.0

2026-07-12 22:08:19 +02:00

database

fix(database): make cross-db migration lossless, transactional, and pre-checked

2026-07-12 20:14:07 +02:00

eventbus

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

logger

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

mtproto

refactor: modernize Go with strings.SplitSeq and maps.Copy

2026-07-08 22:10:54 +02:00

sub

fix(sub): emit the pinned peer cert sha256 in Clash subscriptions

2026-07-15 02:41:49 +02:00

tunnelmonitor

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

util

feat(xray): update xray-core to v26.7.11 and adapt panel

2026-07-12 00:30:47 +02:00

web

fix(traffic): keep node reset propagation out of the serial traffic writer

2026-07-15 02:13:23 +02:00

xray

feat(xray): update xray-core to v26.7.11 and adapt panel

2026-07-12 00:30:47 +02:00