fix: [http.go,fingerprint.go] allow min tls version is tls1.0

XinRoom · Jan 12, 2023 · 3d9b586 · 3d9b586
1 parent 91aa3f1
commit 3d9b586
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/core/port/fingerprint/fingerprint.go b/core/port/fingerprint/fingerprint.go
@@ -174,6 +174,7 @@ func matchRule(network string, ip net.IP, _port uint16, serviceRule serviceRule)
 		// tls
 		connTls, err = tls.DialWithDialer(&net.Dialer{Timeout: 2 * time.Second}, network, address, &tls.Config{
 			InsecureSkipVerify: true,
+			MinVersion:         tls.VersionTLS10,
 		})
 		if err != nil {
 			if strings.HasSuffix(err.Error(), "i/o timeout") {

diff --git a/core/port/fingerprint/http.go b/core/port/fingerprint/http.go
@@ -20,6 +20,7 @@ func newHttpClient() *http.Client {
 	transport := &http.Transport{
 		TLSClientConfig: &tls.Config{
 			InsecureSkipVerify: true,
+			MinVersion:         tls.VersionTLS10,
 		},
 		DialContext: (&net.Dialer{
 			Timeout: 5 * time.Second,