Add iOS 11 fingerprint

u_common.go

@@ -65,6 +65,7 @@ const (
 	helloCustom     = "Custom"
 	helloFirefox    = "Firefox"
 	helloChrome     = "Chrome"
+	helloIOS        = "iOS"
 	helloAndroid    = "Android"
 )
 
@@ -111,6 +112,9 @@ var (
 	HelloChrome_Auto = HelloChrome_62
 	HelloChrome_58   = ClientHelloID{helloChrome, 58}
 	HelloChrome_62   = ClientHelloID{helloChrome, 62}
+
+	HelloIOS_Auto = HelloIOS_11_1
+	HelloIOS_11_1 = ClientHelloID{helloIOS, 111}
 )
 
 // based on spec's GreaseStyle, GREASE_PLACEHOLDER may be replaced by another GREASE value
@@ -141,6 +145,7 @@ func init() {
 // This provides better compatibility with servers on the web, but weakens security. Feel free
 // to use this option if you establish additional secure connection inside of utls connection.
 // This option does not change the shape of parrots (i.e. same ciphers will be offered either way).
+// Must be called before establishing any connections.
 func EnableWeakCiphers() {
 	utlsSupportedCipherSuites = append(cipherSuites, []*cipherSuite{
 		{DISABLED_TLS_RSA_WITH_AES_256_CBC_SHA256, 32, 32, 16, rsaKA,

u_parrots.go

@@ -113,6 +113,63 @@ func initParrots() {
 		GetSessionID: nil,
 	}
 	utlsIdToSpec[HelloFirefox_56] = utlsIdToSpec[HelloFirefox_55]
+
+	utlsIdToSpec[HelloIOS_11_1] = ClientHelloSpec{
+		CipherSuites: []uint16{
+			TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
+			TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
+			DISABLED_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,
+			TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
+			TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
+			TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
+			TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
+			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
+			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
+			DISABLED_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
+			TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
+			TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
+			TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
+			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,
+			TLS_RSA_WITH_AES_256_GCM_SHA384,
+			TLS_RSA_WITH_AES_128_GCM_SHA256,
+			DISABLED_TLS_RSA_WITH_AES_256_CBC_SHA256,
+			TLS_RSA_WITH_AES_128_CBC_SHA256,
+			TLS_RSA_WITH_AES_256_CBC_SHA,
+			TLS_RSA_WITH_AES_128_CBC_SHA,
+		},
+		CompressionMethods: []byte{
+			compressionNone,
+		},
+		Extensions: []TLSExtension{
+			&RenegotiationInfoExtension{renegotiation: RenegotiateOnceAsClient},
+			&SNIExtension{},
+			&UtlsExtendedMasterSecretExtension{},
+			&SignatureAlgorithmsExtension{SupportedSignatureAlgorithms: []SignatureScheme{
+				ECDSAWithP256AndSHA256,
+				PSSWithSHA256,
+				PKCS1WithSHA256,
+				ECDSAWithP384AndSHA384,
+				PSSWithSHA384,
+				PKCS1WithSHA384,
+				PSSWithSHA512,
+				PKCS1WithSHA512,
+				PKCS1WithSHA1,
+			}},
+			&StatusRequestExtension{},
+			&NPNExtension{},
+			&SCTExtension{},
+			&ALPNExtension{AlpnProtocols: []string{"h2", "h2-16", "h2-15", "h2-14", "spdy/3.1", "spdy/3", "http/1.1"}},
+			&SupportedPointsExtension{SupportedPoints: []byte{
+				pointFormatUncompressed,
+			}},
+			&SupportedCurvesExtension{Curves: []CurveID{
+				X25519,
+				CurveP256,
+				CurveP384,
+				CurveP521,
+			}},
+		},
+	}
 }
 
 func (uconn *UConn) applyPresetByID(id ClientHelloID) (err error) {