fix: enable insecure when tls is enabled but sni is empty

Restia-Ashbell · Oct 4, 2024 · 8845d6b · 8845d6b
1 parent fdddce3
commit 8845d6b
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/app/src/main/java/io/nekohasekai/sagernet/fmt/http/HttpFmt.kt b/app/src/main/java/io/nekohasekai/sagernet/fmt/http/HttpFmt.kt
@@ -16,9 +16,10 @@ fun parseHttp(link: String): HttpBean {
         serverPort = httpUrl.port
         username = httpUrl.username
         password = httpUrl.password
+        setTLS(httpUrl.scheme == "https")
         sni = httpUrl.queryParameter("sni")
+        allowInsecure = security == "tls" && sni.isNullOrEmpty()
         name = httpUrl.fragment
-        setTLS(httpUrl.scheme == "https")
     }
 }
 

diff --git a/app/src/main/java/io/nekohasekai/sagernet/group/RawUpdater.kt b/app/src/main/java/io/nekohasekai/sagernet/group/RawUpdater.kt
@@ -248,6 +248,8 @@ object RawUpdater : GroupUpdater() {
                                 password = proxy["password"]?.toString()
                                 setTLS(proxy["tls"]?.toString() == "true")
                                 sni = proxy["sni"]?.toString()
+                                allowInsecure = (proxy["skip-cert-verify"]?.toString() == "true") ||
+                                                (security == "tls" && sni.isNullOrEmpty())
                                 name = proxy["name"]?.toString()
                             })
                         }