Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support trusting user-installed CA certificates to obtain subscription link updates for self-signed certificate websites #4222

Open
susukiue opened this issue Jan 2, 2025 · 6 comments

Comments

@susukiue
Copy link

susukiue commented Jan 2, 2025

Previous versions can support subscription links in this format. I haven't updated v2rayNG for a long time. After updating the software, I found that I can no longer update the subscription as shown in the title.

@Cancer-zern
Copy link

Cancer-zern commented Jan 2, 2025

Same problem with 1.9.24 for subscriptions with basic authentication:
https://user:password@example.com/file.txt

Failure.

If switch on access for anonymous it's working

For NekoBox it's working fine with basic authentication.

@2dust
Copy link
Owner

2dust commented Jan 3, 2025

"Basic ${encode(urlDecode(it))}"

@susukiue
Copy link
Author

susukiue commented Jan 3, 2025

It may be a certificate problem. Does it support trusting the CA certificate installed by the user?

@Cancer-zern
Copy link

I tried to open it in Android WebView with this link it's working and there is no warning with CA.
I've added allowInsecure [v] in Application settings - but it's not helping

I just wanted to let you know that looks all good. The same functionality is working with Nekobox.
Android 14

@susukiue
Copy link
Author

susukiue commented Jan 3, 2025

It may be a certificate problem. Does it support trusting the CA certificate installed by the user?

01-03 12:21:06.018 E/com.v2ray.ang( 9998): Update subscription: proxy not ready or other error, try……
01-03 12:21:07.294 W/System.err( 9998): javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

@Cancer-zern
Copy link

Cancer-zern commented Jan 3, 2025

#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
2025-01-03 04:16:28 172.26.xxx.xx GET /android-configuration1.txt - 443 - 217.165.xx.xx v2rayNG/1.9.24 - 401 2 5 11
2025-01-03 04:16:28 172.26.xxx.xx GET /android-configuration2.txt - 443 - 217.165.xx.xx v2rayNG/1.9.24 - 401 2 5 15
2025-01-03 04:17:34 172.26.xxx.xx GET /android-configuration1.txt - 443 - 217.165.xx.xx v2rayNG/1.9.24 - 401 2 5 15
2025-01-03 04:17:34 172.26.xxx.xx GET /android-configuration2.txt - 443 - 217.165.xx.xx v2rayNG/1.9.24 - 401 2 5 15
2025-01-03 04:28:43 172.26.xxx.xx GET /android-configuration1.txt - 443 username 20.117.xxx.xx NekoBox/Android/1.2.9+(Prefer+ClashMeta+Format) - 200 0 0 129
2025-01-03 04:29:03 172.26.xxx.xx GET /android-configuration2.txt - 443 username 20.117.xxx.xx NekoBox/Android/1.2.9+(Prefer+ClashMeta+Format) - 200 0 0 125
2025-01-03 04:35:59 172.26.xxx.xx GET /android-configuration1.txt - 443 username 217.165.xx.xx NekoBox/Android/1.2.9+(Prefer+ClashMeta+Format) - 200 0 0 31

IIS web server logs

@susukiue susukiue changed the title Support parsing subscription links in User:Pwd@Domain format Support trusting user-installed CA certificates to obtain subscription link updates for self-signed certificate websites Jan 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants