black-internet-days-ahead/sing-box
1
0
Fork 0
mirror of https://github.com/SagerNet/sing-box.git synced 2024-11-22 08:31:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix TLS documentation

Browse source
This commit is contained in:
世界 2022-08-26 18:36:49 +08:00
parent a057754035
commit 432e6adf3e
No known key found for this signature in database
GPG key ID: CD109927C34A63C4
2 changed files with 16 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
docs/configuration/shared/tls.md
View file

@ -39,6 +39,7 @@
```json ```json
{ {
"enabled": true, "enabled": true,
"disable_sni": false,
"server_name": "", "server_name": "",
"insecure": false, "insecure": false,
"alpn": [], "alpn": [],
@ -87,14 +88,18 @@ Cipher suite values:
Enable TLS. Enable TLS.
#### disable_sni
==Client only==
Do not send server name in ClientHello.
#### server_name #### server_name
Used to verify the hostname on the returned certificates unless insecure is given. Used to verify the hostname on the returned certificates unless insecure is given.
It is also included in the client's handshake to support virtual hosting unless it is an IP address. It is also included in the client's handshake to support virtual hosting unless it is an IP address.
See [Server Name Indication](https://en.wikipedia.org/wiki/Server_Name_Indication).
#### insecure #### insecure
==Client only== ==Client only==

12
docs/configuration/shared/tls.zh.md
View file

@ -39,6 +39,7 @@
```json ```json
{ {
"enabled": true, "enabled": true,
"disable_sni": false,
"server_name": "", "server_name": "",
"insecure": false, "insecure": false,
"alpn": [], "alpn": [],
@ -87,14 +88,18 @@ TLS 版本值：
启用 TLS 启用 TLS
#### disable_sni
==仅客户端==
不要在 ClientHello 中发送服务器名称.
#### server_name #### server_name
用于验证返回证书上的主机名，除非设置不安全。 用于验证返回证书上的主机名，除非设置不安全。
它还包含在 ClientHello 中以支持虚拟主机，除非它是 IP 地址。 它还包含在 ClientHello 中以支持虚拟主机，除非它是 IP 地址。
参阅 [Server Name Indication](https://en.wikipedia.org/wiki/Server_Name_Indication)。
#### insecure #### insecure
==仅客户端== ==仅客户端==
@ -208,7 +213,8 @@ EAB（外部帐户绑定）包含将 ACME 帐户绑定或映射到其他已知
外部帐户绑定“用于将 ACME 帐户与非 ACME 系统中的现有帐户相关联，例如 CA 客户数据库。 外部帐户绑定“用于将 ACME 帐户与非 ACME 系统中的现有帐户相关联，例如 CA 客户数据库。
为了启用 ACME 帐户绑定，运行 ACME 服务器的 CA 需要向 ACME 客户端提供 MAC 密钥和密钥标识符，使用 ACME 之外的一些机制。 §7.3.4 为了启用 ACME 帐户绑定，运行 ACME 服务器的 CA 需要向 ACME 客户端提供 MAC 密钥和密钥标识符，使用 ACME 之外的一些机制。
§7.3.4
#### external_account.key_id #### external_account.key_id