MHSanaei b9e1d3afee fix(inbounds): refuse a Shadowsocks-2022 server key xray-core cannot parse ...

xray-core parses the inbound-level Shadowsocks-2022 key with ParseKey and
refuses one of the wrong size while building the inbound, which keeps the
whole core from starting, not only that inbound. Only client keys were
checked, so an API caller posting a 32-byte key on aes-128 (or keeping a
16-byte key after switching to aes-256/chacha20) saved fine and took
Xray down.

AddInbound and UpdateInbound now reject such a key with a message that
names the method and the size it needs. The check uses the core's own
GetCipherMethod/ParseKey, so a raw non-base64 key the core accepts stays
valid. Startup also replaces a stored wrong-size server key: that inbound
never worked, so no client holds a working copy of it.

2026-10-11 20:42:23 +02:00

..

controller

feat(warp): register WARP over MASQUE from the WARP modal

2026-10-11 10:31:01 +02:00

entity

fix(settings): accept five-field crontab for report and LDAP schedules

2026-10-11 20:37:04 +02:00

global

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

job

feat(xray): add the MASQUE protocol and transport

2026-10-11 10:28:49 +02:00

locale

feat(discord): add Discord notification bot service (#6486)

2026-09-13 14:04:53 +02:00

middleware

fix(inbounds): accept masque in the inbound protocol validator

2026-10-11 10:56:47 +02:00

network

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

runtime

fix(node): don't delete clients when a node reports an empty snapshot (#6734)

2026-10-05 16:12:08 +02:00

service

fix(inbounds): refuse a Shadowsocks-2022 server key xray-core cannot parse

2026-10-11 20:42:23 +02:00

session

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

translation

feat(inbounds): TUN adapter type and auto-system options

2026-10-11 15:40:46 +02:00

websocket

fix(tuic): client speed display and certificate button layout (#6723)

2026-10-05 19:46:46 +02:00

cadence_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

node_contract_test.go

fix(node): don't delete clients when a node reports an empty snapshot (#6734)

2026-10-05 16:12:08 +02:00

routes_contract_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

schedule_test.go

fix(settings): accept five-field crontab for report and LDAP schedules

2026-10-11 20:37:04 +02:00

web_mtls_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_mtls.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_tuic_shutdown_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

web.go

fix(settings): accept five-field crontab for report and LDAP schedules

2026-10-11 20:37:04 +02:00