Sub-Store 自动设置服务端证书 SHA-256 指纹仅 Node.js 版支持优先使用 sni, 其次节点服务端其他需求可以让 AI 改改. 比如哪些节点需要加之类的.这里示范的是直接从服务端取, 支持所有目标(包括 sing-box 的 certificate_public_key_sha256)

Sub-Store 自动设置服务端证书 SHA-256 指纹

仅 Node.js 版支持

优先使用 sni, 其次节点服务端
其他需求可以让 AI 改改. 比如哪些节点需要加之类的.
这里示范的是直接从服务端取, 支持所有目标(包括

sing-box 的 certificate_public_key_sha256)

const tls = require("tls");
const crypto = require("crypto");

function getCertificateInfo(host, port = 443) {
return new Promise((resolve) => {
const socket = tls.connect(
{
host,
port,
servername: host,
rejectUnauthorized: false,
},
() => {
try {
const cert = socket.getPeerCertificate(true);

if (!cert || !cert.raw) {
socket.end();
return resolve({
fingerprint: "",
publicKeySha256: "",
});
}

const x509 = new crypto.X509Certificate(cert.raw);

// SHA256 证书指纹
const fingerprint = cert.fingerprint256 || "";

// SHA256 公钥（SPKI）
const publicKeyDer = x509.publicKey.export({
type: "spki",
format: "der",
});

const publicKeySha256 = crypto
.createHash("sha256")
.update(publicKeyDer)
.digest("base64");

socket.end();

resolve({
fingerprint,
publicKeySha256,
});
} catch {
socket.end();
resolve({
fingerprint: "",
publicKeySha256: "",
});
}
}
);

socket.on("error", () => {
resolve({
fingerprint: "",
publicKeySha256: "",
});
});
});
}

async function operator(proxies, targetPlatform, context) {
console.log(`[证书] INFO: 开始处理 ${proxies.length} 个节点`);

for await (const proxy of proxies) {
const host = proxy.sni || proxy.server;

if (!host || ProxyUtils.isIP(host)) {
console.log(
`[证书] WARN: [${proxy.name}] 跳过，目标为 IP 或为空 (${host || "-"})`
);
continue;
}

console.log(
`[证书] INFO: [${proxy.name}] 正在获取 ${host} 的证书信息`
);

const cert = await getCertificateInfo(host);

proxy.fingerprint = cert.fingerprint;

if (cert.publicKeySha256) {
proxy._certificate_public_key_sha256 = [cert.publicKeySha256];
}

if (cert.fingerprint) {
console.log(
`[证书] LOG: [${proxy.name}] fingerprint=${cert.fingerprint}, public_key_sha256=${cert.publicKeySha256}`
);
} else {
console.log(`[证书] WARN: [${proxy.name}] 获取证书失败`);
}
}

console.log(`[证书] INFO: 全部节点处理完成`);

return proxies;
}