Xray-core icon indicating copy to clipboard operation
Xray-core copied to clipboard

相同的 config.json,在 Linux 端无效,在 Mac 端有效

Open YangEfei opened this issue 3 years ago • 8 comments

如题,我在 Mac 端使用一套 vless + xtls 配置的代理服务器,使用的客户端为 V2RayU,使用的内核为 XRay 1.4.2,配置完成后可正常访问 Google 等外网。

之后将 config.json 复制到 Linux 服务器上进行配置(CentOS7),直接使用 XRay 加载该配置运行,XRay 版本为 1.5.5,通过 proxychains4 进行代理后发现打出的日志为权限无效或过期等内容,具体如下:

2022/07/19 00:44:09 [Warning] [3842434669] app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx): > x509: certificate has expired or is not yet valid: current time 2022-07-19T00:44:05+08:00 is after 2021-09-30T14:01:15Z transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx): > x509: certificate has expired or is not yet valid: current time 2022-07-19T00:44:06+08:00 is after 2021-09-30T14:01:15Z transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx): > x509: certificate has expired or is not yet valid: current time 2022-07-19T00:44:07+08:00 is after 2021-09-30T14:01:15Z transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx): > x509: certificate has expired or is not yet valid: current time 2022-07-19T00:44:08+08:00 is after 2021-09-30T14:01:15Z] > common/retry: all retry attempts failed 2022/07/19 00:44:09 [Info] [3842434669] app/proxyman/inbound: connection ends > proxy/socks: connection ends > proxy/socks: failed to transport all TCP response > io: read/write on closed pipe

其中服务器信息已做屏蔽。

不知道是否有相关经历的朋友可以分享一下经验?非常感谢!

YangEfei avatar Jul 18 '22 16:07 YangEfei

建议vps端 各客户端core升级成最新版本试试

再帖下 客户端,vps端config.json内容,(去隐私部分)

chika0801 avatar Jul 18 '22 16:07 chika0801

感谢你的回复! 目前 vps 端使用的是 v2ray 4.32.1,应该是近期的版本,为了稳定性暂时未更新到最新。 Mac 端和 Linux 端均已更新至 XRay 1.5.5,目前 Mac 端仍可正常代理,检查日志也无特殊异常。

config.json 如下:

{
  "log": {
    "error": "",
    "loglevel": "info",
    "access": ""
  },
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "protocol": "socks",
      "settings": {
        "udp": false,
        "auth": "noauth"
      },
      "port": "1080"
    },
    {
      "listen": "127.0.0.1",
      "protocol": "http",
      "settings": {
        "timeout": 360
      },
      "port": "1087"
    }
  ],
  "outbounds": [
    {
      "mux": {
        "enabled": false,
        "concurrency": 8
      },
      "protocol": "vless",
      "streamSettings": {
        "wsSettings": {
          "path": "/xxx",
          "headers": {
            "host": "xxx"
          }
        },
        "tlsSettings": {
          "serverName": "xxx",
          "allowInsecure": false
        },
        "security": "tls",
        "network": "ws"
      },
      "tag": "proxy",
      "settings": {
        "vnext": [
          {
            "address": "ip",
            "users": [
              {
                "encryption": "none",
                "id": "password",
                "level": 0,
                "flow": ""
              }
            ],
            "port": 443
          }
        ]
      }
    },
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "UseIP",
        "userLevel": 0
      }
    },
    {
      "tag": "block",
      "protocol": "blackhole",
      "settings": {
        "response": {
          "type": "none"
        }
      }
    }
  ],
  "dns": {},
  "routing": {
    "settings": {
      "domainStrategy": "AsIs",
      "rules": [
        {
          "type": "field",
          "outboundTag": "direct",
          "domain": [
            "localhost",
            "geosite:cn"
          ]
        },
        {
          "type": "field",
          "ip": [
            "geoip:private",
            "geoip:cn"
          ],
          "outboundTag": "direct"
        }
      ]
    }
  },
  "transport": {}
}

由于 Linux 端使用了相同的配置文件,故不重复粘贴。 其中 Linux 端为避免端口冲突,将 1080 改为了 10808,从 v2ray 端的日志也可以看到 proxy4chains 的流量被接受,应可排除端口问题。

YangEfei avatar Jul 18 '22 17:07 YangEfei

看客户端配置你用的组合是vless ws tls。客户端配置看不出有问题。

你能不能再找个vps用xray core搭好后,配置文件用一样的,测试下能不能通(排除法因为不知道你服务器端配置内容)(排除v2fly 和xray core原因)(一般客户和服务器core我喜欢都用一样的)

另外建议帖个vps的config文件内容。或加xray的tg群白天找水友求助(方便有人实时回复你)

chika0801 avatar Jul 18 '22 17:07 chika0801

certificate has expired or is not yet valid

看这句日志翻译了下,你看看vps上的ssl证书了?

chika0801 avatar Jul 18 '22 17:07 chika0801

你不如检查一下证书(包括根证书)是不是过期了,或者是时间没有同步

0xffffharry avatar Jul 18 '22 23:07 0xffffharry

用的免费证书,Let‘s Encrypt 中间ca过期过建议升级系统ca证书

qist avatar Jul 19 '22 11:07 qist

重新签发一个证书,或者"allowInsecure": false这里改为true

fengqi avatar Jul 19 '22 15:07 fengqi

fullchain.cer

xqzr avatar Jul 20 '22 07:07 xqzr