MHSanaei 66ef5bbc05 fix(sub): emit host TLS verification at xray level in JSON subscription ...

The JSON subscription flattens tlsSettings into xray's client shape before
the per-host loop, then applyExternalProxyTLSToStream writes the host's
echConfigList, verifyPeerCertByName, pinnedPeerCertSha256 and
allowInsecure into the panel-only tlsSettings.settings map. Xray ignores
that map, so a host's ECH (and its pins / verify name) never reached the
client and connections through the host failed.

After the host overrides are applied, lift that map through the same
writer tlsData uses for the inbound's own TLS: fields land at the top of
tlsSettings, pins are joined into the comma string xray parses, and
allowInsecure is dropped exactly as it is for the inbound (removed from
xray). The Clash renderer still reads the nested map and is unchanged.

The helper-level subtest that pinned the nested location as the "json"
shape is replaced by an end-to-end GetJson test on a host-backed inbound.

Closes #6743

2026-10-05 22:26:04 +02:00

..

amneziawg

fix(amneziawg): bound S1-S3 by the receive buffer, reject overlapping H (#6642)

2026-09-26 22:02:49 +02:00

amneziawgnet

chore(amneziawgnet): bind test sockets to loopback

2026-10-03 00:00:36 +02:00

config

v3.9.0

2026-10-03 13:37:35 +02:00

crypto/nodetoken

fix(nodetoken): stop refusing every node-token key file on Windows

2026-09-27 15:55:42 +02:00

database

fix(database): keep the dump restore inside its own database file

2026-10-03 13:19:54 +02:00

eventbus

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

logger

fix(logger): reuse the open log rotator when InitLogger runs again

2026-09-27 15:32:20 +02:00

mtproto

fix(mtproto): synchronize child-process lifecycle (#6141)

2026-07-29 20:56:26 +02:00

nodee2e

chore(nodes): run the master+node scopes in parallel and document both layers

2026-10-05 13:30:18 +02:00

pia

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

sub

fix(sub): emit host TLS verification at xray level in JSON subscription

2026-10-05 22:26:04 +02:00

testpg

test(database): give each package its own schema when tests run on PostgreSQL (#6594)

2026-09-26 21:13:42 +02:00

tuic

fix(tuic): accept the server's STOP_SENDING when tests close uni streams

2026-10-03 15:48:05 +02:00

tunnelmonitor

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

util

fix(nodes): let a master's push and reconcile converge node inbounds

2026-10-05 12:17:59 +02:00

web

fix(node): ignore a node's stats for clients detached from the inbound

2026-10-05 20:37:35 +02:00

xray

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00