Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Xray-core "MitM" requires a certificate to run #4336

Open
patterniha opened this issue Feb 11, 2025 · 1 comment
Open

Xray-core "MitM" requires a certificate to run #4336

patterniha opened this issue Feb 11, 2025 · 1 comment

Comments

@patterniha
Copy link

patterniha commented Feb 11, 2025

XRay-core will unveil MitM in next version (MitM + Domain Fronting).

the users need to create and import a self-signed-certificate into the config:

"certificates": [
            {
              "usage": "issue",
              "certificateFile": "mycert.crt",
              "keyFile": "mycert.key"
            }
]

so like geo-asset-files we need a section in v2rayNG to import the user certificate and its private-key.

///

also, Xray-core can generate self-signed-certificate with xray tls cert -ca -file=mycert command,

this command generate a certificate and its private-key and saves them in: mycert.crt and mycert.key

in addition, the users need to import mycert.crt into the android-system,

So In addition to the ability to Import the existing user certificate, v2rayNG must be able to generate and export a new certificate.

@patterniha patterniha changed the title Xray-core MitM requires a certificate to run Xray-core "MitM" requires a certificate to run Feb 11, 2025
@patterniha
Copy link
Author

patterniha commented Feb 20, 2025

@Fangliding

why dislike?

If v2rayNG is not able to generate a certificate, then most of the users will use the ready-made certificate posted on youtube,...
and then anyone can insert their own certificate into the victim's device and perform criminal acts.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant