Skip to content

Allow user certificate #4375

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Mar 12, 2025
Merged

Allow user certificate #4375

merged 4 commits into from
Mar 12, 2025

Conversation

UjuiUjuMandan
Copy link
Contributor

@UjuiUjuMandan UjuiUjuMandan commented Mar 10, 2025

@UjuiUjuMandan
Copy link
Contributor Author

UjuiUjuMandan commented Mar 10, 2025

@patterniha Please check if it works for your subscriptions and DoH. It uses another application ID so that can coexist with the original.

@patterniha
Copy link
Contributor

patterniha commented Mar 10, 2025

This version didn't work for me at all.

03-10 09:50:15.196 D/com.v2ray.ang.fdroid( 8437): runPlugin
03-10 09:50:15.186 D/com.v2ray.ang.fdroid( 8437): java.io.IOException: Cannot run program "/data/app/~~iXX85Cgf56s-vIUjHCQG2w==/com.v2ray.ang.fdroid-NVtFCuI8L1EdYbtDQ4mt9Q==/lib/arm64/libtun2socks.so" (in directory "/data/user/0/com.v2ray.ang.fdroid/files"): error=2, No such file or directory
03-10 09:50:15.185 D/com.v2ray.ang.fdroid( 8437): [/data/app/~~iXX85Cgf56s-vIUjHCQG2w==/com.v2ray.ang.fdroid-NVtFCuI8L1EdYbtDQ4mt9Q==/lib/arm64/libtun2socks.so, --netif-ipaddr, 10.10.10.2, --netif-netmask, 255.255.255.252, --socks-server-addr, 127.0.0.1:10808, --tunmtu, 1500, --sock-path, sock_path, --enable-udprelay, --loglevel, notice, --dnsgw, 127.0.0.1:10853]
03-10 09:50:15.162 I/GoLog   ( 8437): [Warning] core: Xray 25.1.1 started
03-10 09:50:15.161 I/GoLog   ( 8437): start core
03-10 09:50:15.154 I/GoLog   ( 8437): new core
03-10 09:50:15.054 I/GoLog   ( 8437):  IPs: [127.0.0.1]
03-10 09:50:15.054 I/GoLog   ( 8437):  Port: 10808
03-10 09:50:15.054 I/GoLog   ( 8437):  Domain: 127.0.0.1
03-10 09:50:15.054 I/GoLog   ( 8437): Prepare Result:
03-10 09:50:15.054 I/GoLog   ( 8437): Preparing Domain: 127.0.0.1:10808
03-10 09:50:15.054 I/GoLog   ( 8437): loading core config
--------- beginning of main

@UjuiUjuMandan
Copy link
Contributor Author

libtun2socks.so" (in directory "/data/user/0/com.v2ray.ang.fdroid/files"): error=2, No such file or directory

Sorry, it should be built in Actions instead of my local machine lacking dependencies. Try this instead:

@patterniha
Copy link
Contributor

patterniha commented Mar 10, 2025

libtun2socks.so" (in directory "/data/user/0/com.v2ray.ang.fdroid/files"): error=2, No such file or directory

Sorry, it should be built in Actions instead of my local machine lacking dependencies. Try this instead:

it works for subscription, but not for Xray-core-built-in-DOH.

Although, at least it doesn't matter to me, i submit this issue before implementing h2c and mitm-domain-fronting in xray-core

@UjuiUjuMandan
Copy link
Contributor Author

not for Xray-core-built-in-DOH

I guess the Golang program may still don't respect user CA, no idea how crypto/tls fetches root CA storage.

@patterniha
Copy link
Contributor

patterniha commented Mar 10, 2025

I guess the Golang program may still don't respect user CA, no idea how crypto/tls fetches root CA storage.

So this is related to Xray-core, not v2rayNG.

we now have h2c + tls-repack in Xray-core, so this feature is not necessary for Xray-core, and only important for subscription.

@2dust 2dust merged commit bada7c9 into 2dust:master Mar 12, 2025
1 check passed
@UjuiUjuMandan UjuiUjuMandan deleted the nsc branch March 12, 2025 01:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Support trusting user-installed CA certificates to obtain subscription link updates for self-signed certificate websites
3 participants