Commit Graph
24 Commits
Author SHA1 Message Date
fscarmen adcaf813fc v1.2.19 Enhance security by replacing certificate skipping with certificate fingerprint verification
This commit improves the security posture for Shadowrocket, Clash, and sing-box clients by implementing certificate fingerprint validation instead of the less secure certificate skipping approach.

Key changes:
- Shadowrocket: Replaced insecure TLS validation with HPKP-based certificate fingerprint verification
- Clash: Updated configuration to use certificate fingerprints instead of skip-cert-verify flags
- sing-box: Implemented certificate_public_key_sha256 verification for enhanced TLS security

This change ensures that only connections with verified server certificates are accepted, significantly reducing the risk of man-in-the-middle attacks while maintaining compatibility with self-signed certificates.
2025-11-06 09:16:58 +00:00
fscarmen 85917ee7f4 Fix a bug in Clash proxy format; Change the Github Proxy. 2025-08-22 14:00:28 +00:00
fscarmen 56004f8f75 Modify the API URL for counting runtime statistics. 2025-07-28 08:33:11 +00:00
fscarmen 464c5dc714 Modify DNS strategy logic to use ping for detecting IPv4 and IPv6 network connectivity. 2025-07-24 13:39:02 +00:00
fscarmen b520674f09 Prioritize using a GitHub proxy and replace the script execution count tracking service. 2025-07-12 04:18:19 +00:00
fscarmen 38a7f4cd77 Fix the issue where AnyTLS URI is not displayed in Shadowrocket. 2025-07-01 08:19:41 +00:00
fscarmen c37baf743c fix bug when upgrading sing-box to the latest core version. 2025-05-19 04:23:42 +00:00
fscarmen ee030a8e09 v1.2.16 Use OpenRC on Alpine to replace systemctl (Python3-compatible version). 2025-04-07 02:01:40 +00:00
fscarmen 712185c578 v1.2.15 AnyTLS supports output for clients such as Shadowrocket, Clash Mihomo, and Sing-box. 2025-04-05 14:18:05 +00:00
fscarmen 5312718dde Use Firebase realtime database + Netlify cloud function to replace hits.seeyoufarm.com for usage statistics; Replace CF CDN domains. 2025-04-03 07:45:56 +00:00
fscarmen 974fe8736d Adapt to the new DNS configuration format in Sing-box v1.12 alpha.18+. 2025-04-01 15:22:17 +00:00
fscarmen bd3e1777b7 domain_strategy is merged to domain_resolver in sing-box 1.12.0; Clash support TCP Brutal. 2025-03-25 12:52:30 +00:00
fscarmen d6ab0a626d v1.2.14 Added support for anytls protocol. 2025-03-24 00:53:26 +00:00
fscarmen bf575805bb v1.2.13 Compatible with Sing-box 1.12.0-alpha.18 2025-03-18 05:43:17 +00:00
fscarmen 0079e3d06f v1.2.11 Add server-side time synchronization configuration. 2025-01-28 02:14:00 +00:00
fscarmen 2a4f2eccfd v1.2.10 Add port hopping for hysteria2 in sing-box client output. 2024-12-31 02:01:13 +00:00
fscarmen 2415986d18 v1.2.9 Refactored the chatGPT detection method. 2024-12-26 16:29:05 +00:00
fscarmen fd7ede0255 v1.2.8 Refine the Warp routing for chatGPT. 2024-12-13 14:36:55 +00:00
fscarmen 27c466d090 v1.2.7 Compatible with Sing-box 1.11.0-beta.8+. Thanks to the PR from brother Maxrxf. 2024-12-10 14:21:00 +00:00
fscarmen b05aec66ad Force sing-box vesion to 1.11.0-alpha.6 2024-11-08 07:42:38 +00:00
fscarmen a2dffc7e67 v1.2.6 Fixed the bug that clash subscription. 2024-10-28 12:34:58 +00:00
fscarmen 7159e0d5b1 Add Github proxy and translation api; Renew CF CDN; Optimize code. 2024-05-21 09:50:46 +00:00
fscarmen 53065a4e83 Fix a bug in Json and Token Tunnels. 2024-04-04 15:26:05 +00:00
fscarmen edb022abfc Sing-box + Argo container is newly launched. 2024-04-01 13:24:01 +00:00