mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-05-29 16:39:35 +00:00
externalProxySNI fell back to ep["dest"] when an external-proxy row had no SNI of its own, silently overwriting the upstream tlsSettings serverName already written into the share-link params. Operators using forceTls=same with a CDN edge IP got SNI=<edge-ip> in the link instead of the real cert hostname, breaking TLS handshakes. The fallback is dropped: an explicit ep["sni"] still overrides, but a blank entry now leaves the upstream SNI in place. Tests updated.