fumiama/terasu
1
0
Fork 0
mirror of https://github.com/fumiama/terasu.git synced 2026-06-05 01:00:23 +08:00
Code Activity

feat: limit tls minversion to 1.2

Browse Source
This commit is contained in:
源文雨
2025-10-06 10:51:44 +08:00
parent 2732915dda
commit 2e34cdfed3
4 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
dns/dns.go
View File

@@ -179,7 +179,10 @@ func (ds *DNSList) DialContext(ctx context.Context, dialer *net.Dialer, firstFra
} }
continue continue
} }
tlsConn = tls.Client(conn, &tls.Config{ServerName: host}) tlsConn = tls.Client(conn, &tls.Config{
ServerName: host,
MinVersion: tls.VersionTLS12,
})
if firstFragmentLen > 0 { if firstFragmentLen > 0 {
err = terasu.Use(tlsConn).HandshakeContext(ctx, firstFragmentLen) err = terasu.Use(tlsConn).HandshakeContext(ctx, firstFragmentLen)
} else { } else {

5
dns/dns_test.go
View File

@@ -114,7 +114,10 @@ func (ds *DNSList) test() {
if err != nil { if err != nil {
continue continue
} }
tlsConn := tls.Client(conn, &tls.Config{ServerName: host}) tlsConn := tls.Client(conn, &tls.Config{
ServerName: host,
MinVersion: tls.VersionTLS12,
})
err = terasu.Use(tlsConn).Handshake(4) err = terasu.Use(tlsConn).Handshake(4)
_ = tlsConn.Close() _ = tlsConn.Close()
if err == nil { if err == nil {

2
http/http.go
View File

@@ -60,6 +60,7 @@ var DefaultClient = http.Client{
} }
tlsConn = tls.Client(conn, &tls.Config{ tlsConn = tls.Client(conn, &tls.Config{
ServerName: host, ServerName: host,
MinVersion: tls.VersionTLS12,
}) })
if terasu.DefaultFirstFragmentLen > 0 { if terasu.DefaultFirstFragmentLen > 0 {
err = terasu.Use(tlsConn).HandshakeContext(ctx, terasu.DefaultFirstFragmentLen) err = terasu.Use(tlsConn).HandshakeContext(ctx, terasu.DefaultFirstFragmentLen)
@@ -77,6 +78,7 @@ var DefaultClient = http.Client{
} }
tlsConn = tls.Client(conn, &tls.Config{ tlsConn = tls.Client(conn, &tls.Config{
ServerName: host, ServerName: host,
MinVersion: tls.VersionTLS12,
}) })
err = tlsConn.HandshakeContext(ctx) err = tlsConn.HandshakeContext(ctx)
if err == nil { if err == nil {

2
terasu_test.go
View File

@@ -19,6 +19,7 @@ func TestHTTPDialTLS13(t *testing.T) {
t.Log("net.Dial succeeded") t.Log("net.Dial succeeded")
tlsConn := tls.Client(conn, &tls.Config{ tlsConn := tls.Client(conn, &tls.Config{
ServerName: "huggingface.co", ServerName: "huggingface.co",
MinVersion: tls.VersionTLS12,
InsecureSkipVerify: true, InsecureSkipVerify: true,
}) })
err = Use(tlsConn).Handshake(4) err = Use(tlsConn).Handshake(4)
@@ -57,6 +58,7 @@ func TestHTTPDialTLS12(t *testing.T) {
tlsConn := tls.Client(conn, &tls.Config{ tlsConn := tls.Client(conn, &tls.Config{
ServerName: "huggingface.co", ServerName: "huggingface.co",
InsecureSkipVerify: true, InsecureSkipVerify: true,
MinVersion: tls.VersionTLS12,
MaxVersion: tls.VersionTLS12, MaxVersion: tls.VersionTLS12,
}) })
err = Use(tlsConn).Handshake(4) err = Use(tlsConn).Handshake(4)