package v2ray.core.transport.internet.tls

Get desktop application:
View/edit binary Protocol Buffers messages

Used in: Config

• bytes Certificate = 1

  TLS certificate in x509 format.

• bytes Key = 2

  TLS key in x509 format.

• Certificate.Usage usage = 3

• string certificate_file = 96001

• string key_file = 96002

Used in: Certificate

• ENCIPHERMENT = 0

• AUTHORITY_VERIFY = 1

• AUTHORITY_ISSUE = 2

• AUTHORITY_VERIFY_CLIENT = 3

Used in: utls.Config

• bool allow_insecure = 1

  Whether or not to allow self-signed certificates.

• repeated Certificate certificate = 2

  List of certificates to be served on server.

• string server_name = 3

  Override server name.

• repeated string next_protocol = 4

  Lists of string as ALPN values.

• bool enable_session_resumption = 5

  Whether or not to enable session (ticket) resumption.

• bool disable_system_root = 6

  If true, root certificates on the system will not be loaded for verification.

• repeated bytes pinned_peer_certificate_chain_sha256 = 7

  @Document A pinned certificate chain sha256 hash. @Document If the server's hash does not match this value, the connection will be aborted. @Document This value replace allow_insecure. @Critical

• bool verify_client_certificate = 8

  If true, the client is required to present a certificate.

• Config.TLSVersion min_version = 9

  Minimum TLS version to support.

• Config.TLSVersion max_version = 10

  Maximum TLS version to support.

• bool allow_insecure_if_pinned_peer_certificate = 11

  Whether or not to allow self-signed certificates when pinned_peer_certificate_chain_sha256 is present.

• bytes ech_config = 16

  ECH Config in bytes format

• string ech_DOHserver = 17

  DOH server to query HTTPS record for ECH

Used in: Config

• Default = 0

• TLS1_0 = 1

• TLS1_1 = 2

• TLS1_2 = 3

• TLS1_3 = 4