fix: shadowtls v1 not work

wwqgtxx · wwqgtxx · commit 52ad793d1190 · 2025-04-22T20:52:34.000+08:00
diff --git a/adapter/outbound/shadowsocks.go b/adapter/outbound/shadowsocks.go
@@ -84,7 +84,7 @@ type gostObfsOption struct {
 }
 
 type shadowTLSOption struct {
-	Password       string `obfs:"password"`
+	Password       string `obfs:"password,omitempty"`
 	Host           string `obfs:"host"`
 	Fingerprint    string `obfs:"fingerprint,omitempty"`
 	SkipCertVerify bool   `obfs:"skip-cert-verify,omitempty"`
diff --git a/transport/sing-shadowtls/shadowtls.go b/transport/sing-shadowtls/shadowtls.go
@@ -37,6 +37,9 @@ func NewShadowTLS(ctx context.Context, conn net.Conn, option *ShadowTLSOption) (
 		InsecureSkipVerify: option.SkipCertVerify,
 		ServerName:         option.Host,
 	}
+	if option.Version == 1 {
+		tlsConfig.MaxVersion = tls.VersionTLS12 // ShadowTLS v1 only support TLS 1.2
+	}
 
 	var err error
 	tlsConfig, err = ca.GetSpecifiedFingerprintTLSConfig(tlsConfig, option.Fingerprint)

Original file line number	Diff line number	Diff line change
`@@ -84,7 +84,7 @@ type gostObfsOption struct {`
`84`	`84`	`}`
`85`	`85`
`86`	`86`	`type shadowTLSOption struct {`
`87`		- Password string `obfs:"password"`
	`87`	+ Password string `obfs:"password,omitempty"`
`88`	`88`	Host string `obfs:"host"`
`89`	`89`	Fingerprint string `obfs:"fingerprint,omitempty"`
`90`	`90`	SkipCertVerify bool `obfs:"skip-cert-verify,omitempty"`
Original file line number	Diff line number	Diff line change
`@@ -37,6 +37,9 @@ func NewShadowTLS(ctx context.Context, conn net.Conn, option *ShadowTLSOption) (`
`37`	`37`	`InsecureSkipVerify: option.SkipCertVerify,`
`38`	`38`	`ServerName: option.Host,`
`39`	`39`	`}`
	`40`	`+ if option.Version == 1 {`
	`41`	`+ tlsConfig.MaxVersion = tls.VersionTLS12 // ShadowTLS v1 only support TLS 1.2`
	`42`	`+ }`
`40`	`43`
`41`	`44`	`var err error`
`42`	`45`	`tlsConfig, err = ca.GetSpecifiedFingerprintTLSConfig(tlsConfig, option.Fingerprint)`