feat: add fingerprint param

transport/trojan/trojan.go

@@ -8,6 +8,7 @@ import (
 	"encoding/hex"
 	"errors"
 	"fmt"
+	tlsC "github.com/Dreamacro/clash/component/tls"
 	"io"
 	"net"
 	"net/http"
@@ -50,6 +51,7 @@ type Option struct {
 	ALPN           []string
 	ServerName     string
 	SkipCertVerify bool
+	Fingerprint    string
 	Flow           string
 	FlowShow       bool
 }
@@ -80,6 +82,15 @@ func (t *Trojan) StreamConn(conn net.Conn) (net.Conn, error) {
 			ServerName:         t.option.ServerName,
 		}
 
+		if len(t.option.Fingerprint) == 0 {
+			xtlsConfig = tlsC.GetGlobalFingerprintXTLCConfig(xtlsConfig)
+		} else {
+			var err error
+			if xtlsConfig, err = tlsC.GetSpecifiedFingerprintXTLSConfig(xtlsConfig, t.option.Fingerprint); err != nil {
+				return nil, err
+			}
+		}
+
 		xtlsConn := xtls.Client(conn, xtlsConfig)
 
 		ctx, cancel := context.WithTimeout(context.Background(), C.DefaultTLSTimeout)
@@ -95,6 +106,16 @@ func (t *Trojan) StreamConn(conn net.Conn) (net.Conn, error) {
 			InsecureSkipVerify: t.option.SkipCertVerify,
 			ServerName:         t.option.ServerName,
 		}
+
+		if len(t.option.Fingerprint) == 0 {
+			tlsConfig = tlsC.GetGlobalFingerprintTLCConfig(tlsConfig)
+		} else {
+			var err error
+			if tlsConfig, err = tlsC.GetSpecifiedFingerprintTLSConfig(tlsConfig, t.option.Fingerprint); err != nil {
+				return nil, err
+			}
+		}
+
 		tlsConn := tls.Client(conn, tlsConfig)
 		if err := tlsConn.Handshake(); err != nil {
 			return nil, err

transport/v2ray-plugin/websocket.go

@@ -2,6 +2,7 @@ package obfs
 
 import (
 	"crypto/tls"
+	tlsC "github.com/Dreamacro/clash/component/tls"
 	"net"
 	"net/http"
 
@@ -16,6 +17,7 @@ type Option struct {
 	Headers        map[string]string
 	TLS            bool
 	SkipCertVerify bool
+	Fingerprint    string
 	Mux            bool
 }
 
@@ -35,11 +37,20 @@ func NewV2rayObfs(conn net.Conn, option *Option) (net.Conn, error) {
 
 	if option.TLS {
 		config.TLS = true
-		config.TLSConfig = &tls.Config{
+		tlsConfig := &tls.Config{
 			ServerName:         option.Host,
 			InsecureSkipVerify: option.SkipCertVerify,
 			NextProtos:         []string{"http/1.1"},
 		}
+		if len(option.Fingerprint) == 0 {
+			config.TLSConfig = tlsC.GetGlobalFingerprintTLCConfig(tlsConfig)
+		} else {
+			var err error
+			if config.TLSConfig, err = tlsC.GetSpecifiedFingerprintTLSConfig(tlsConfig, option.Fingerprint); err != nil {
+				return nil, err
+			}
+		}
+
 		if host := config.Headers.Get("Host"); host != "" {
 			config.TLSConfig.ServerName = host
 		}

transport/vless/xtls.go

@@ -2,6 +2,7 @@ package vless
 
 import (
 	"context"
+	tlsC "github.com/Dreamacro/clash/component/tls"
 	"net"
 
 	C "github.com/Dreamacro/clash/constant"
@@ -11,6 +12,7 @@ import (
 type XTLSConfig struct {
 	Host           string
 	SkipCertVerify bool
+	FingerPrint    string
 	NextProtos     []string
 }
 
@@ -20,6 +22,14 @@ func StreamXTLSConn(conn net.Conn, cfg *XTLSConfig) (net.Conn, error) {
 		InsecureSkipVerify: cfg.SkipCertVerify,
 		NextProtos:         cfg.NextProtos,
 	}
+	if len(cfg.FingerPrint) == 0 {
+		xtlsConfig = tlsC.GetGlobalFingerprintXTLCConfig(xtlsConfig)
+	} else {
+		var err error
+		if xtlsConfig, err = tlsC.GetSpecifiedFingerprintXTLSConfig(xtlsConfig, cfg.FingerPrint); err != nil {
+			return nil, err
+		}
+	}
 
 	xtlsConn := xtls.Client(conn, xtlsConfig)
 

transport/vmess/tls.go

@@ -12,15 +12,25 @@ import (
 type TLSConfig struct {
 	Host           string
 	SkipCertVerify bool
+	FingerPrint    string
 	NextProtos     []string
 }
 
 func StreamTLSConn(conn net.Conn, cfg *TLSConfig) (net.Conn, error) {
-	tlsConfig := tlsC.MixinTLSConfig(&tls.Config{
+	tlsConfig := &tls.Config{
 		ServerName:         cfg.Host,
 		InsecureSkipVerify: cfg.SkipCertVerify,
 		NextProtos:         cfg.NextProtos,
-	})
+	}
+
+	if len(cfg.FingerPrint) == 0 {
+		tlsConfig = tlsC.GetGlobalFingerprintTLCConfig(tlsConfig)
+	} else {
+		var err error
+		if tlsConfig, err = tlsC.GetSpecifiedFingerprintTLSConfig(tlsConfig, cfg.FingerPrint); err != nil {
+			return nil, err
+		}
+	}
 
 	tlsConn := tls.Client(conn, tlsConfig)