Skip to content

add option to customize and disable sni - #883

Open
skbeh wants to merge 1 commit into
IrineSistiana:mainfrom
skbeh:sni
Open

add option to customize and disable sni#883
skbeh wants to merge 1 commit into
IrineSistiana:mainfrom
skbeh:sni

Conversation

@skbeh

@skbeh skbeh commented Mar 15, 2025

Copy link
Copy Markdown

The code is adopted from https://github.com/SagerNet/sing-box.

Close #860.

@yeezylife

Copy link
Copy Markdown
   upstreams:
     - addr: "quic://dns.nextdns.io"
       insecure_skip_verify: true
       disable_sni: true
 ```
 请问你这个pr里加的功能 是不是要同时insecure_skip_verify: true和disable_sni: true 才能开启呀

@skbeh

skbeh commented Oct 4, 2025

Copy link
Copy Markdown
Author
   upstreams:
     - addr: "quic://dns.nextdns.io"
       insecure_skip_verify: true
       disable_sni: true

请问你这个pr里加的功能 是不是要同时insecure_skip_verify: true和disable_sni: true 才能开启呀

The server name must be set to make the certificate verification work, otherwise insecure_skip_verify is required to be enabled.

@yeezylife

yeezylife commented Oct 4, 2025

Copy link
Copy Markdown
   upstreams:
     - addr: "quic://dns.nextdns.io"
       server_name: dns.nextdns.io
       disable_sni: true

thanks for you reply, is this the correct server_name setting method? just fill it with the same url in addr?

@skbeh

skbeh commented Oct 4, 2025

Copy link
Copy Markdown
Author

Yes, filling server_name with the server domain works most of the time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Feature request] Fake SNI

2 participants