mirrors/utls
1
0
Fork 0
mirror of https://github.com/refraction-networking/utls.git synced 2025-04-04 04:27:36 +03:00
Code Issues Projects Releases Packages Wiki Activity

minimize the change made + wrap the modified section

Browse source
This commit is contained in:
molon 2023-03-12 13:49:23 +08:00
parent f04eb57e6c
commit 9ef5f4f15f
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
handshake_client.go
View file

@ -303,6 +303,7 @@ func (c *Conn) loadSession(hello *clientHelloMsg) (cacheKey string,
return cacheKey, nil, nil, nil, nil
}
serverCert := session.serverCertificates[0]
// [UTLS SECTION START]
if !c.config.InsecureSkipTimeVerify {
if c.config.time().After(serverCert.NotAfter) {
// Expired certificate, delete the entry.
@ -321,6 +322,7 @@ func (c *Conn) loadSession(hello *clientHelloMsg) (cacheKey string,
return cacheKey, nil, nil, nil, nil
}
}
// [UTLS SECTION END]
}
if session.vers != VersionTLS13 {
@ -901,13 +903,12 @@ func (c *Conn) verifyServerCertificate(certificates [][]byte) error {
// [UTLS SECTION START]
opts := x509.VerifyOptions{
Roots: c.config.RootCAs,
CurrentTime: c.config.time(),
Intermediates: x509.NewCertPool(),
}
if c.config.InsecureSkipTimeVerify {
opts.CurrentTime = certs[0].NotAfter
} else {
opts.CurrentTime = c.config.time()
}
if len(c.config.InsecureServerNameToVerify) == 0 {