Bot releases are hidden (Show)
Published by gaukas about 1 year ago
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.3.3...v1.4.0
This is enlisted as pre-release because it syncs with Go 1.21rc4 -- which is not a stable release of Go.
Published by gaukas over 1 year ago
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.3.2...v1.3.3
Published by gaukas over 1 year ago
Added HelloChrome_100_PSK
and HelloChrome_112_PSK_Shuf
, which includes PreSharedKey
automatically instead of Padding
as the last TLS extensions.
To use them correctly, you are required to use (*UConn).ApplyPreset()
:
conn := utls.UClient(plainConn, utlsConfig, utls.HelloCustom)
preset, err := utls.UTLSIdToSpec(utls.HelloChrome_112_PSK_Shuf) // correct
if err != nil {
return nil, err
}
if pskExt, ok := preset.Extensions[len(preset.Extensions)-1].(*utls.FakePreSharedKeyExtension); ok {
pskExt.PskIdentities = []utls.PskIdentity{ // must set identity
{
Label: []byte("blahblahblah"), // change this
ObfuscatedTicketAge: 0, // change this
},
}
// each fake binder is 32 bytes of zeros
pskExt.PskBinders = [][]byte{ // must set psk binders
{
0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, // change this
},
} // byte slices
}
conn.ApplyPreset(&preset) // make sure to apply preset to the connection
Instead of
conn := utls.UClient(plainConn, utlsConfig, utls.HelloChrome_112_PSK_Shuf) // incorrect! PSK extension will use empty payload!
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.3.1...v1.3.2
Published by gaukas over 1 year ago
InsecureSkipTimeVerify
by @molon in https://github.com/refraction-networking/utls/pull/174
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.3.0...v1.3.1
Published by gaukas over 1 year ago
#170 and #171 patched vulnerabilities allowing a strong attacker to detect and break uTLS (and Go's crypto/tls
) connections. Please consider updating your go.mod
to use the latest version of uTLS.
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.2.2...v1.3.0
Published by gaukas over 1 year ago
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.2.1...v1.2.2
Published by gaukas over 1 year ago
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.2.0...v1.2.1
We will not sync with upstream crypto/tls
until the next tagged version.
Published by gaukas almost 2 years ago
This update includes some major refactorizations and improvements, ALPS (ApplicationSettingsExtension
) support, and included a new experimental anti-fingerprinting fingerprint from Chrome/Chromium.
utlsIdToSpec()
as UTLSIdToSpec()
by @gaukas in https://github.com/refraction-networking/utls/pull/136
Minimum Go version: -> 1.16
1.19
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.1.5...v1.2.0
Published by gaukas about 2 years ago
Note: this is the last tagged version in which we support old Go versions.
From next release, we will support go 1.19
and above only.
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.1.3...v1.1.5
Published by gaukas about 2 years ago
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.1.2...v1.1.3
Published by gaukas about 2 years ago
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.1.1...v1.1.2
Published by gaukas over 2 years ago
Full Changelog: https://github.com/refraction-networking/utls/compare/v1.0.0...v1.1.1
Published by sergeyfrolov almost 3 years ago
First tagged release.