FranzKafkaYu / x-ui

Lightweight Xray panel with multi-protocol and multi-user on the same port,supports English language and Telegram bot. Easy to use and easy to manage.
GNU General Public License v3.0
7.84k stars 1.57k forks source link

建议增加 ssl 证书 OCSP装订更新 代码 "ocspStapling": 3600 #416

Closed i-Eureka closed 1 year ago

i-Eureka commented 1 year ago

Welcome

Description of the problem,screencshot would be good

OCSP 装订更新,与证书热重载的时间间隔。引用地址 :https://xtls.github.io/config/transport.html#realityobject 虽然xtls官方说明“ocspStapling默认值为 3600,即一小时”,但是如果不配置该内容"ocspStapling": 3600,在https://www.ssllabs.com 测试 OCSP stapling 显示为 No ,反之为 yes。 下图为未配置"ocspStapling": "" 或 "ocspStapling": 3600 后的测试内容(亦是当前x-ui生成的配置状态) image 下图为配置"ocspStapling": 3600 后的测试内容 image

Version of x-ui

```console $ x-ui version # Paste output here ```

x-ui log or xray log

```console # paste log here ```
FranzKafkaYu commented 1 year ago

@i-Eureka 最新版本已增加该设定。

i-Eureka commented 1 year ago

装订更新 生成配置"ocspStapling": "36000","36000" 不可加引号,应当为"ocspStapling": 3600

infra/conf/serial: failed to read config file at line 154 char 37 > json: cannot unmarshal string into Go struct field TLSCertConfig.inbounds.streamSettings.tlsSettings.certificates.ocspStapling of type uint6

FranzKafkaYu commented 1 year ago

已修复并更新binary,可再重新安装。