fix tls handshake sniffing

2023-12-27 19:24:31 +08:00
parent 1117723913
commit e1ae379048
3 changed files with 7 additions and 3 deletions
--- a/handler/redirect/tcp/handler.go
+++ b/handler/redirect/tcp/handler.go
@ -109,9 +109,10 @@ func (h *redirectHandler) Handle(ctx context.Context, conn net.Conn, opts ...han
 			conn.SetReadDeadline(time.Time{})
 		}
 		rw = xio.NewReadWriter(io.MultiReader(bytes.NewReader(hdr[:n]), rw), rw)
+		tlsVersion := binary.BigEndian.Uint16(hdr[1:3])
 		if err == nil &&
 			hdr[0] == dissector.Handshake &&
-			binary.BigEndian.Uint16(hdr[1:3]) == tls.VersionTLS10 {
+			(tlsVersion >= tls.VersionTLS10 && tlsVersion <= tls.VersionTLS13) {
 			return h.handleHTTPS(ctx, rw, conn.RemoteAddr(), dstAddr, log)
 		}