package tls import ( "crypto/tls" "v2ray.com/core/common/log" ) var ( globalSessionCache = tls.NewLRUClientSessionCache(128) ) func (v *Config) BuildCertificates() []tls.Certificate { certs := make([]tls.Certificate, 0, len(v.Certificate)) for _, entry := range v.Certificate { keyPair, err := tls.X509KeyPair(entry.Certificate, entry.Key) if err != nil { log.Warning("TLS: ignoring invalid X509 key pair: ", err) continue } certs = append(certs, keyPair) } return certs } func (v *Config) GetTLSConfig() *tls.Config { config := &tls.Config{ ClientSessionCache: globalSessionCache, NextProtos: []string{"http/1.1"}, } if v == nil { return config } config.InsecureSkipVerify = v.AllowInsecure config.Certificates = v.BuildCertificates() config.BuildNameToCertificate() if len(v.ServerName) > 0 { config.ServerName = v.ServerName } return config }